Behavioral task
behavioral1
Sample
2488ed9f21c974723dbc5c0a45e1a5ef_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2488ed9f21c974723dbc5c0a45e1a5ef_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2488ed9f21c974723dbc5c0a45e1a5ef_JaffaCakes118
-
Size
174KB
-
MD5
2488ed9f21c974723dbc5c0a45e1a5ef
-
SHA1
58cd8d9f721aa5aacd6078f3bb21a279213c7045
-
SHA256
d57975be69e41801d4d98a3324becfb6f38c21ed18f10d9f32024c5e9ee91a72
-
SHA512
ae3516d897bf1f911f4550eb08fe783f0f948fb7e2dab3e062b3e555bd17230cd7aeb11a7204cd8a425ecea5e58d01e4f579ef88e71f212c5a97dd57674b1cfa
-
SSDEEP
3072:aE0s3XBBBfMMg5839dFbbbYAA8n59o5TfNiAKfC/Ny/9EsXt/3tAmZDObgkJWcd:l3JfMMg58397nYJ8njodLKfC1O9hR3tw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2488ed9f21c974723dbc5c0a45e1a5ef_JaffaCakes118
Files
-
2488ed9f21c974723dbc5c0a45e1a5ef_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 400KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 679KB - Virtual size: 680KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE