Behavioral task
behavioral1
Sample
276e93ca811d329881b3fefee563bb34_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
276e93ca811d329881b3fefee563bb34_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
276e93ca811d329881b3fefee563bb34_JaffaCakes118
-
Size
348KB
-
MD5
276e93ca811d329881b3fefee563bb34
-
SHA1
ab7c004bbf84474d1c6ab44ae3ab2b3f7342c257
-
SHA256
cee7204e601fc43459b10b91198476f91860df326a538578774fb879735062f7
-
SHA512
b4bd2015bb701253c5da7f2ea2116785fae8a58ea25ac4ca20e3464aad05a8cfae0c113fa8ebb0d8894a976786068f6e6aed47c66b7b37b1d58dcb1c1f9c532f
-
SSDEEP
6144:mlZ/zUMu4pDSxsCMRzf7x3SfS1JAzXBtL76loI24VLUU/F2:mHLUMuiv9RgfSjAzRtyN9vF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 276e93ca811d329881b3fefee563bb34_JaffaCakes118
Files
-
276e93ca811d329881b3fefee563bb34_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 444KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 253KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE