Behavioral task
behavioral1
Sample
03e5c3fed58a388081d32a03102f8c6c_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
03e5c3fed58a388081d32a03102f8c6c_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
03e5c3fed58a388081d32a03102f8c6c_JaffaCakes118
-
Size
77KB
-
MD5
03e5c3fed58a388081d32a03102f8c6c
-
SHA1
a7ee8d58c613993b9dea44ada3c3b2dcf4a1b4f3
-
SHA256
d3dab82a9fa4bc5107e7938036aec658925bf61a7b6af2a639c070b2e62c1584
-
SHA512
3d707488bf113f94e7762d21ecd5931696978dd4f5003641f27cb78df9ccc424197f8b26f24e0f057b02eeb2e450ed13bead7c9f36af9a86d1fd86e1124c9920
-
SSDEEP
1536:Em/64yMgmTNbwb6adnasMbD1awZia1UOzpy4j5+Yq+IcnzBEOY:r/vzN8b6adnahsr4JIFOY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03e5c3fed58a388081d32a03102f8c6c_JaffaCakes118
Files
-
03e5c3fed58a388081d32a03102f8c6c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 297KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE