Behavioral task
behavioral1
Sample
0c34eab704ec887e7ef061b6200241fd_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0c34eab704ec887e7ef061b6200241fd_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0c34eab704ec887e7ef061b6200241fd_JaffaCakes118
-
Size
1.2MB
-
MD5
0c34eab704ec887e7ef061b6200241fd
-
SHA1
fb47fa3bc74b962426fd44167147dd40c2d8ed13
-
SHA256
c917489764a2370460b422eedf8b226ba8e4c2201e9be2adb97251568416bc7e
-
SHA512
f2a7edbe7e1495c8b034ede63b2b77cd1ca7101973dca4c6702ff09021713b0476c209745faff0070c05b2a51872d10d2e3d9bf1110ea6c6142b273b9ac735db
-
SSDEEP
24576:MHMYtUpnnftjlqKL7p3STVqd+abUbVuasGYq726xj8rNHMMIEay:OltUVnftj51STM+akJR72pKE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c34eab704ec887e7ef061b6200241fd_JaffaCakes118
Files
-
0c34eab704ec887e7ef061b6200241fd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 372KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 187KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE