Behavioral task
behavioral1
Sample
0776cff94118368d55e2f5daec27ef20_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0776cff94118368d55e2f5daec27ef20_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0776cff94118368d55e2f5daec27ef20_JaffaCakes118
-
Size
313KB
-
MD5
0776cff94118368d55e2f5daec27ef20
-
SHA1
d09317d7f9d7ee2d6a9ffb5ed95b241fb7b00b71
-
SHA256
271040e4f036982f33728282f29fe0dfce42c69ad8dbb9a6ab434ad5246c104c
-
SHA512
b14aed1e102969c2186cbb54d210a518cbc4a795c13231c87ae20f5795cfc30e4ae2da83cb4d6ce241bfa574193284f474a451a5fd66c3d5834cb93ca78b0f80
-
SSDEEP
6144:AnlEoWaZknVIaVaHl/c+gLzTwWlAdG+GhOYxfdUv2oSKlnu:wlEoWlnVIYIlTQzlCqi2oSKBu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0776cff94118368d55e2f5daec27ef20_JaffaCakes118
Files
-
0776cff94118368d55e2f5daec27ef20_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 596KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 282KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE