Behavioral task
behavioral1
Sample
1ab931db501696ad3791ebd89f8696d6_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1ab931db501696ad3791ebd89f8696d6_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1ab931db501696ad3791ebd89f8696d6_JaffaCakes118
-
Size
472KB
-
MD5
1ab931db501696ad3791ebd89f8696d6
-
SHA1
0f0bc8e7d3fbddaa76ba3b573bad0c4e46d8617e
-
SHA256
0d9a865ccb3a8cd26a4bd8a181dc85d16882b86ed0f54cee8a912ce1262f4492
-
SHA512
4911e5736cd2a41a2e70e4869f0d86f0164ba69d64fd1d21140b9b22b154d65db2c301f9ea18abbc44ad703e43b676b0ff0ef2a8a403eb0fb35a390e28494817
-
SSDEEP
12288:mW2H1pRs7mEc6MSmnaN9AhlzpyvozwxEza/:mWCHs7dfAhl42za/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ab931db501696ad3791ebd89f8696d6_JaffaCakes118
Files
-
1ab931db501696ad3791ebd89f8696d6_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE