Behavioral task
behavioral1
Sample
31a2aaec1ae85fdb3ad58c7fa935e199_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
31a2aaec1ae85fdb3ad58c7fa935e199_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
31a2aaec1ae85fdb3ad58c7fa935e199_JaffaCakes118
-
Size
462KB
-
MD5
31a2aaec1ae85fdb3ad58c7fa935e199
-
SHA1
bdc5acb007051fb5f185bdd2e8b46a16a5c8e9f7
-
SHA256
36e1ceeee2c78246f1295d2369c3b31e1cc82f72e7c7c3037fefeba3ebbb91f8
-
SHA512
24b9f1ddeae0fb4881fc41e99fd251496e781ad3d17be79796657948e9819a9d1f100e09005ac189752fe8a428e2d9df655520747d39be5da80d937c2a4aeb5f
-
SSDEEP
12288:sF0pNpZ7sC+35XyXaIlLY9E0UwBjlnM/k:1pbJEJXyXVGEf2jlM/k
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31a2aaec1ae85fdb3ad58c7fa935e199_JaffaCakes118
Files
-
31a2aaec1ae85fdb3ad58c7fa935e199_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 190KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE