Behavioral task
behavioral1
Sample
153f90ee4b7ea2fc38729460b587016e_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
153f90ee4b7ea2fc38729460b587016e_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
153f90ee4b7ea2fc38729460b587016e_JaffaCakes118
-
Size
495KB
-
MD5
153f90ee4b7ea2fc38729460b587016e
-
SHA1
94fb0995e21ce456d40fafd95476b2ba0c28c472
-
SHA256
adf1b22a80e1bf96113e5699caae43a7403e9c19a95d8ecc777a59e68f8fd77e
-
SHA512
219a88a1545ce6e413b22ce3a83fd2139a138c7d597ff8ada3b268480dcfa11da979f9a7049e6172af02a91f23afba9d00839edac3410b601bc6a5142fe690ef
-
SSDEEP
12288:6D/zGU0dpfMkIjXzgW+rUFbqWNEhmRpYvkdYUNoS:6LMkk4zgyBNEowCY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 153f90ee4b7ea2fc38729460b587016e_JaffaCakes118
Files
-
153f90ee4b7ea2fc38729460b587016e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 304KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 488KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE