Behavioral task
behavioral1
Sample
1a887dd64bdbd49b48a25123124916db_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1a887dd64bdbd49b48a25123124916db_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1a887dd64bdbd49b48a25123124916db_JaffaCakes118
-
Size
158KB
-
MD5
1a887dd64bdbd49b48a25123124916db
-
SHA1
1d30294dcfa2827a9bc1dbdf25649db7373e4bdf
-
SHA256
d39f3012af8fb75dab0908869b5cf0d98976e56cd6ee9027a5b7090f6c2e1fbf
-
SHA512
42afcc0c217538db5e6fe0d803ec1ff015a5e419bc3d1aaab652fa1fd4c810325b0e7073d17b3728550f4ed51e9258ffbe30c7bd7c46a79c8c9d12fbb4393776
-
SSDEEP
3072:+8iOq75HIXkwmaj+m20xj36aZwpan030C7M96DKY51zrOr/deI1w6P5pd8xB:piOcIXzm0+kxjqaiI6nt51zrOpw6P5bi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a887dd64bdbd49b48a25123124916db_JaffaCakes118
Files
-
1a887dd64bdbd49b48a25123124916db_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 191KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE