Behavioral task
behavioral1
Sample
166d75c1d3de9e632266e73a5507fd88_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
166d75c1d3de9e632266e73a5507fd88_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
166d75c1d3de9e632266e73a5507fd88_JaffaCakes118
-
Size
543KB
-
MD5
166d75c1d3de9e632266e73a5507fd88
-
SHA1
00cffaa618671e12044f0a6d687fb817f7aa108b
-
SHA256
f0b9f7ab99c9c0524dffcb6f21178ddd274804cd96db1435024076ee940a56fd
-
SHA512
4f7ccfe5f6a7238e8e3e8149e8ae1a81a6f7e0b85a8237bb9f4beaaf047f66d8dd19dfbd4a01c436b2a53c2ec15992ea70c4732b241cc52efe2b62f018cf2282
-
SSDEEP
6144:OGNV6B0bfMC5/P5k0OZK1xItgDHHeV1dj29e6YlFFiJOcETDLsuqoL5Huuuc9jq3:OGNG0jMC5/21Zr8+FF1rsuAcw3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 166d75c1d3de9e632266e73a5507fd88_JaffaCakes118
Files
-
166d75c1d3de9e632266e73a5507fd88_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 222KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE