Behavioral task
behavioral1
Sample
1377de0e6811871dc2518a62a42b751f_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
1377de0e6811871dc2518a62a42b751f_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
1377de0e6811871dc2518a62a42b751f_JaffaCakes118
-
Size
257KB
-
MD5
1377de0e6811871dc2518a62a42b751f
-
SHA1
51cf4d0230fcbdff8610eef79cc89f1919c7343a
-
SHA256
de5e190bc44e71ff93f96e0069cc6c1d8570eda543120c9116264c571d48e03b
-
SHA512
067911386c96747dcd0b143cc677435a175c62bad4c0ce0f55464b3bf6f372bddbdc7c3ebe75ee782c9ee9585f4dcaf1470a443481f3d3d26c527d1de871c0cf
-
SSDEEP
6144:z3GfkqCid9VLU3guIQcgxYFBb3thQ1N+05yjnBOGRWaG8MBZ:z3skqCijVY3JcBFfu6BOx8Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1377de0e6811871dc2518a62a42b751f_JaffaCakes118
Files
-
1377de0e6811871dc2518a62a42b751f_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 812KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 814KB - Virtual size: 816KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE