Behavioral task
behavioral1
Sample
01268062d610585810f3bd67e9e8efc4_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
01268062d610585810f3bd67e9e8efc4_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
01268062d610585810f3bd67e9e8efc4_JaffaCakes118
-
Size
105KB
-
MD5
01268062d610585810f3bd67e9e8efc4
-
SHA1
28d6035add9d01e8645a36ebe184fc4621afbd49
-
SHA256
1dfa2f2ac2e6f9b8a83225eb87e1fe0bb93b8928747b961055d6edca6e2aa17c
-
SHA512
cf04e18743a6b065b849e7600c6f2e62d4d3f4246c7d5f9ad1e1d998478be2ae4e84d0f6c6e2ac9e3138d00c220d9224e974969bd0be265e46c85e55f9155ac7
-
SSDEEP
3072:e39OuuGp4hOAFdqiY/UAoLe7BbQmvDneRcFisxllgt64De:ekup4hxM7rvbeggtbe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01268062d610585810f3bd67e9e8efc4_JaffaCakes118
Files
-
01268062d610585810f3bd67e9e8efc4_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE