Behavioral task
behavioral1
Sample
153ebd5624dfe1fc1a1c691d53bb8f1b_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
153ebd5624dfe1fc1a1c691d53bb8f1b_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
153ebd5624dfe1fc1a1c691d53bb8f1b_JaffaCakes118
-
Size
306KB
-
MD5
153ebd5624dfe1fc1a1c691d53bb8f1b
-
SHA1
e055e1de612f7c43df7918491a8cfac5c6fdce98
-
SHA256
629a48269203156988cf3c6a3a90cd74d1f251f2ae92a8603617e8765dfd13b3
-
SHA512
72909fb4edc530f85dc7d0ac14a623027a5fa33e665e82703dea2788462b0c5c142e37bfea3decf4eef207255eacea8dfc49162d053c40f98cbdce4646430a6c
-
SSDEEP
6144:tls0+PSMyXF3xj1klsWMb1JGyu/xnqeKOV6oL7J7eoMGxnq4BS6EUbvIFpDt8Lu:tlHCMrjg6b2bnqezV64J7rZBSfpDt8Lu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 153ebd5624dfe1fc1a1c691d53bb8f1b_JaffaCakes118
Files
-
153ebd5624dfe1fc1a1c691d53bb8f1b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 122KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.opcandy Size: 293KB - Virtual size: 296KB
IMAGE_SCN_MEM_DISCARDABLE