Behavioral task
behavioral1
Sample
066c6cae29a3e6bfc3d97cce43ad1592_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
066c6cae29a3e6bfc3d97cce43ad1592_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
066c6cae29a3e6bfc3d97cce43ad1592_JaffaCakes118
-
Size
2.1MB
-
MD5
066c6cae29a3e6bfc3d97cce43ad1592
-
SHA1
26d03285f220619bb713ac091db1d83a3a0a0ceb
-
SHA256
f9b9b874f6d13564dc50e38c21468369b3cea3b1a3a8c5b9644340017bcd2b1f
-
SHA512
1b80847aac7c9b09aad5cb9f03a92ae5cc1f8a37a2f98e4d987fb1ae9afbdb9dd1d65d2e641a4154ad49f260d8c567c39ce2db264bd059e17c1b90c092e2a497
-
SSDEEP
49152:n4HOg2TNzmkvLZrr7FUi009KvEaLZyt/mnvZpyxQv1eTGwMpTKoofS:nKOgGzTvLZjFTWvpgt2vZWVgvofS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 066c6cae29a3e6bfc3d97cce43ad1592_JaffaCakes118
Files
-
066c6cae29a3e6bfc3d97cce43ad1592_JaffaCakes118.exe windows:9 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 468KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 959KB - Virtual size: 960KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ