Behavioral task
behavioral1
Sample
03f83342aac0b3924956c1e3b2051fce_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
03f83342aac0b3924956c1e3b2051fce_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
03f83342aac0b3924956c1e3b2051fce_JaffaCakes118
-
Size
365KB
-
MD5
03f83342aac0b3924956c1e3b2051fce
-
SHA1
ee2943c5624aabee343566a20341061e6cfbaece
-
SHA256
1b3a0d15083f6d130923c5172d5ffa4c12f64d6922bec784c2ba6fa72a2b62bc
-
SHA512
079bba28ad30f76020c5528fc293258fd6905456ecb2b88a00e28297d43186a5154c49f4d511c8c3083824f3fba2973e98108482f9746a729c64d5d0350a8ff4
-
SSDEEP
6144:BvCW2oG3C4oGWBgnPOCn1Y72tg0uxdX1jHS8+NeWUG0cBphySkjG+3YXcQYY4CoS:CJ3iGWBgPQ2qBDFy8+NPUG0e4jG2gcPM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03f83342aac0b3924956c1e3b2051fce_JaffaCakes118
Files
-
03f83342aac0b3924956c1e3b2051fce_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_SYSTEM
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 359KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE