Behavioral task
behavioral1
Sample
07555e44d9f45b3c7803c9b98e048cd9_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
07555e44d9f45b3c7803c9b98e048cd9_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
07555e44d9f45b3c7803c9b98e048cd9_JaffaCakes118
-
Size
469KB
-
MD5
07555e44d9f45b3c7803c9b98e048cd9
-
SHA1
06c4ecd501ec0f7ad867d80b952d8a1e546a2950
-
SHA256
521bca3be3350e5e0e7ecadb4d4bcdf001758ad5cf3521154548f5a400b405bd
-
SHA512
8c05bba9327a9b83df6744f084f316f371474cbdaa99380b6475aa5771c0f65cf1789ba1a44e36eb11efbc28adcc3753bebaadcb07457ca64cd736e2963a51d6
-
SSDEEP
6144:xTP96Pms6GibtDH5rrxl2yonHRUtA2gb9QA04aU+eOWd808+NreXXx5eg:596OdXlZrxl2yo2Gb9QN0+eObeMt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07555e44d9f45b3c7803c9b98e048cd9_JaffaCakes118
Files
-
07555e44d9f45b3c7803c9b98e048cd9_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 196KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE