Behavioral task
behavioral1
Sample
28b7df26dd508296acc11e51a56cd569_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
28b7df26dd508296acc11e51a56cd569_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
28b7df26dd508296acc11e51a56cd569_JaffaCakes118
-
Size
355KB
-
MD5
28b7df26dd508296acc11e51a56cd569
-
SHA1
0396e2ee567647c640262fdd909ad969accb6612
-
SHA256
ec3c719ba5dbf1ee2ec44ce2f470aa27d5f3b9da69a5babf5f9c632d4ce75736
-
SHA512
279046940e0e2b29a67fa6c217b1ce8a75a17512d1c13d8cb8212b28cb4d55f42da5059cf77c49cd5831fd4ca5b17bf131bd887fb09df1d57f153e52f8cc53b8
-
SSDEEP
6144:TknN4CVUIm6uk06ZLYgvBA+8xmrxgmA+3cclptVopA72nAQ:AnNhuBoY8SorxgmA+nlvVl72nx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28b7df26dd508296acc11e51a56cd569_JaffaCakes118
Files
-
28b7df26dd508296acc11e51a56cd569_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 138KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE