Behavioral task
behavioral1
Sample
304e284ea44ff7b4b631f076ee847b9f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
304e284ea44ff7b4b631f076ee847b9f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
304e284ea44ff7b4b631f076ee847b9f_JaffaCakes118
-
Size
465KB
-
MD5
304e284ea44ff7b4b631f076ee847b9f
-
SHA1
c62ee22001362552fd06f93cb711bceffd26ffb9
-
SHA256
40d3ace038caaf5a24146e192f518b106d5a0e7343cba17ddbf2ac048ae8cbe8
-
SHA512
2361fcd8a090ee73b9ffd690f8578c702e556dd1b22897bbb863682d5d8fb2599fd358d7cfb249e4dda8075f8108432a0bf2b3855a5f68fd7103a4c8e76834b2
-
SSDEEP
6144:/YgYnlseuog58jEn0d9aPZPfz5H9MUVWMSyBOW8c94etJRjtcQsIjfi:/YgiseuGAiaRXggdBOW8c9ttJRWQxj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 304e284ea44ff7b4b631f076ee847b9f_JaffaCakes118
Files
-
304e284ea44ff7b4b631f076ee847b9f_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 193KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE