Behavioral task
behavioral1
Sample
175b2dc88ec3f91aefe20d2c6bfa9b72_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
175b2dc88ec3f91aefe20d2c6bfa9b72_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
175b2dc88ec3f91aefe20d2c6bfa9b72_JaffaCakes118
-
Size
54KB
-
MD5
175b2dc88ec3f91aefe20d2c6bfa9b72
-
SHA1
4c039439984f7d19f53c2a587efae9697e800cd3
-
SHA256
1be24242efddf27a4300526794d6c20ee7e08e26adb2e9ead2fddc1ef9969135
-
SHA512
6b066d767d08e668ebbc2adb1bb03aea7b0fa24edc125f7c687b306ded404d2795e3512eefc079b516fa489787f40242ec7b9d2ed99096e2ea990f559ee5d37a
-
SSDEEP
1536:72pi3qiw/jh6+urfsTj6hChwtwWeSZDkw9eAzR6v:/06tCj6MhwOjADkw97zc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 175b2dc88ec3f91aefe20d2c6bfa9b72_JaffaCakes118
Files
-
175b2dc88ec3f91aefe20d2c6bfa9b72_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 932KB - Virtual size: 932KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE