Behavioral task
behavioral1
Sample
1b42d944cf60a0dbf50acccd6472548c_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1b42d944cf60a0dbf50acccd6472548c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1b42d944cf60a0dbf50acccd6472548c_JaffaCakes118
-
Size
2.0MB
-
MD5
1b42d944cf60a0dbf50acccd6472548c
-
SHA1
8cfccb64150383c2a6f50bff6c534a3021f2be25
-
SHA256
a293fbdf95bdad7703009ea1b700eeb56d7f30ae6354402473e17a24c3888dcb
-
SHA512
8bc5f1818970119936477219977a93ba6dbc4c1ca4e23a5dce98b09c51453b46d0b4ab56b712f1a3100273247fb3d6b700bb03a9667163f84f3163b93b77c6c4
-
SSDEEP
24576:XTP1+mIpQQh7P4yCYiPeB9ZC1pH6xmHP2xmFQJyyUagtuSUahVzhCj:DdApLhyrWPE1pH6xmHP2xmSJyyqmOy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b42d944cf60a0dbf50acccd6472548c_JaffaCakes118
Files
-
1b42d944cf60a0dbf50acccd6472548c_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 532KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 995KB - Virtual size: 996KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ