Behavioral task
behavioral1
Sample
242ccab23d04184ba90a017d3833e8cb_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
242ccab23d04184ba90a017d3833e8cb_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
242ccab23d04184ba90a017d3833e8cb_JaffaCakes118
-
Size
545KB
-
MD5
242ccab23d04184ba90a017d3833e8cb
-
SHA1
0f1fb18ff764fbaac362851659363ab244d4edfa
-
SHA256
f707854d61f122f60875ab64793bdf37d55a74f5278b458c605a03e0adaf26bc
-
SHA512
db5de61819de137d17c57b07a52bab8247d38c751b8fb36118a122b9cbebcd243c5dd8d2ddfd658feb67565263566e4090dc7000ab354d526abd05fb723a7c9d
-
SSDEEP
12288:HxmIupW7j0BcAboSA7pSg0sp5EpttPWU7fDGgy:HshcAboSAX4zteU7D
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 242ccab23d04184ba90a017d3833e8cb_JaffaCakes118
Files
-
242ccab23d04184ba90a017d3833e8cb_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 220KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE