Behavioral task
behavioral1
Sample
303184644f24cf6db2e17f5f8ebca276_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
303184644f24cf6db2e17f5f8ebca276_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
303184644f24cf6db2e17f5f8ebca276_JaffaCakes118
-
Size
78KB
-
MD5
303184644f24cf6db2e17f5f8ebca276
-
SHA1
6ddb29044f49d5be8275d6416544df2ef4bbb221
-
SHA256
2fe3cbb39cecd98b19135ac298c55de71f98eecf07d1431e2c50420572c42787
-
SHA512
39bcc21538cfb1d5951bdfb560c0373fdc1e8837afd86fb130510ef462c8c1f541985d2df034df63692be6a646cc43ac7fe1e2021437aa4e9dc521aa1cf39a5d
-
SSDEEP
1536:14/3+iIbz6EoFbNry2xE4PcQxow0+l/IeMnWdHkmA+Dnouy8:u/3O6EWry2pPc2/0nePymdout
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 303184644f24cf6db2e17f5f8ebca276_JaffaCakes118
Files
-
303184644f24cf6db2e17f5f8ebca276_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 156KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE