Behavioral task
behavioral1
Sample
1bc18e0d60d56742057c7742ae5204c8_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1bc18e0d60d56742057c7742ae5204c8_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
1bc18e0d60d56742057c7742ae5204c8_JaffaCakes118
-
Size
250KB
-
MD5
1bc18e0d60d56742057c7742ae5204c8
-
SHA1
58884a7cfe58821318b51aafd44e012a2dd5c8fa
-
SHA256
daccfcd00a68fbf1306cf1084c7c682b0551bf560ce983a9c499cf3410ce6cd8
-
SHA512
d4dc9ef0fd05e56c5b69dc8169108487edb9413e08f90dc13305b9cb075a222eae4949992d07fbd18791bc332057cb3dd477c0e24d0c57a536da8289a7b50721
-
SSDEEP
6144:chieuJDr5T8b2ufqBLjSB/MS7irtIa6cwoD8ZroSfjGFA:teKrJJuf86AYcwoaoSbr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1bc18e0d60d56742057c7742ae5204c8_JaffaCakes118
Files
-
1bc18e0d60d56742057c7742ae5204c8_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 456KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 242KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE