Behavioral task
behavioral1
Sample
30bc6bed4682028f5b31a274f22ae2fd_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
30bc6bed4682028f5b31a274f22ae2fd_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
30bc6bed4682028f5b31a274f22ae2fd_JaffaCakes118
-
Size
63KB
-
MD5
30bc6bed4682028f5b31a274f22ae2fd
-
SHA1
6178907a90fb8490c8d4c4ce7b36cf5daca1abcc
-
SHA256
da7c6c76b8e667dda4259eb9c2576e85574f8c31b6efd67ea37180d596fc2262
-
SHA512
beb54671cc623ed85edf4e309986182036fe6d89865db870684f885ef3ba76882a1788ebe3c54899353e0d787ac8ed1491889253b7dd8398f751b4714388665f
-
SSDEEP
1536:a1q+if0OW7MIiQzy1LeM4jSUE+vsLWIzWCOoiao+11G303b:aT77p21yY+vazvXiT+1U03b
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30bc6bed4682028f5b31a274f22ae2fd_JaffaCakes118
Files
-
30bc6bed4682028f5b31a274f22ae2fd_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 193KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE