Behavioral task
behavioral1
Sample
048788bd8bae61a9402c2b84564c15c9_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
048788bd8bae61a9402c2b84564c15c9_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
048788bd8bae61a9402c2b84564c15c9_JaffaCakes118
-
Size
206KB
-
MD5
048788bd8bae61a9402c2b84564c15c9
-
SHA1
aeb753cb2b562468d42cf5fe16d91edfccdb1f35
-
SHA256
583efbc73db6279bf0c9d41bb63c5840ced552d512700aa150b731304e36bc6e
-
SHA512
99fb1b315332924d34362442083f1dbcf5a1d9f0c7aded988bbffb053d0c0e484340afef784860c1ed714e26f1dd5032ebb5e8f53ccd6301ffeb6bbc9c2d38a9
-
SSDEEP
6144:vjtIjC5dd0GP8601htzE65EtZl+9FyZG0LO77D:vjtIjCm9hzd5EtnHxLsn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 048788bd8bae61a9402c2b84564c15c9_JaffaCakes118
Files
-
048788bd8bae61a9402c2b84564c15c9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 202KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE