Behavioral task
behavioral1
Sample
184db20af00463a922493267d5fdd16f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
184db20af00463a922493267d5fdd16f_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
184db20af00463a922493267d5fdd16f_JaffaCakes118
-
Size
948KB
-
MD5
184db20af00463a922493267d5fdd16f
-
SHA1
3f46f357ed12f4a97ceae2e9f3bcf2272e97c63c
-
SHA256
c8fb24cfddff81acf701951f6363c33a67084d4022c450de3baa4deeafaf5278
-
SHA512
24e602cd65a2a84a9744ee319121ced9e2cec2bbc5e4b977260c754fac57cd5f6df699595ed1f640a906509539f36cbc52559c83b32ba81c66ee6f4d06c46791
-
SSDEEP
24576:4V0z2mRVoht4glEQ0JxGSTwH9wWDFX0EQ1odfZtlX:4Ve2+OnGQCUSTwH9waBtlFZt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 184db20af00463a922493267d5fdd16f_JaffaCakes118
Files
-
184db20af00463a922493267d5fdd16f_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 916KB - Virtual size: 916KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE