Behavioral task
behavioral1
Sample
14c8b85e04ddd54ea9a2d2a0ca1f76d9_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
14c8b85e04ddd54ea9a2d2a0ca1f76d9_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
14c8b85e04ddd54ea9a2d2a0ca1f76d9_JaffaCakes118
-
Size
471KB
-
MD5
14c8b85e04ddd54ea9a2d2a0ca1f76d9
-
SHA1
93770113d014d515469b1b9fb7d2d98b0ce1cc46
-
SHA256
468a33471b8b479e0f40b3fc371a7d6ff32ff0d57b6d831ab88f092fa018dcaa
-
SHA512
c47826fc84671b725daad102bbf9a479e0ceac5c8dcbd75f5136c70eba6d12c6d13058aed4f34dad76bcdcfd94a8d97bb597fa4197321124bf3b452e3e7b8559
-
SSDEEP
12288:ckVgMxP6Fo/bakZ+isTWBn5M30aIef/Cp:PVgM56ujaG+isTYneLM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14c8b85e04ddd54ea9a2d2a0ca1f76d9_JaffaCakes118
Files
-
14c8b85e04ddd54ea9a2d2a0ca1f76d9_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 190KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE