Behavioral task
behavioral1
Sample
1004443b1313668ccaef71c1e06573ef_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1004443b1313668ccaef71c1e06573ef_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1004443b1313668ccaef71c1e06573ef_JaffaCakes118
-
Size
158KB
-
MD5
1004443b1313668ccaef71c1e06573ef
-
SHA1
5240b637d06fb11f4bef46313b873862cee52858
-
SHA256
1ca4bb0f06976ccca879b079e13826e26603b88e4ca0272b07842b4e95060c5f
-
SHA512
c4f76261ef2f58266c830e8ac3ff24fc1e19ab916b63e51025b31590791680e181dbc8726ebb4fcae4aceb9dd1f91c9d13b768821868f3edb6af43df4525bff7
-
SSDEEP
3072:Ph6nNO4WbZ0VPsIwB6LjKd5eY/gCku3vAYWt79LYgdJzF0leA+8xmm+UqhOy5:PknN4CVUIm6uk06ZLYgvBA+8xmr5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1004443b1313668ccaef71c1e06573ef_JaffaCakes118
Files
-
1004443b1313668ccaef71c1e06573ef_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 388KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE