Behavioral task
behavioral1
Sample
32c07b382a15e336270cbb773eb51a22_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
32c07b382a15e336270cbb773eb51a22_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
32c07b382a15e336270cbb773eb51a22_JaffaCakes118
-
Size
93KB
-
MD5
32c07b382a15e336270cbb773eb51a22
-
SHA1
f8cacbf7d16e1f02476cd3e7627a41f86a9744b4
-
SHA256
d6613ef864fa20137ec3ecb0ccb4dbfce355b1afc61909d3a936c5befe7b05de
-
SHA512
f698341762e2de121fb2543b3ec20224250a3471d2863d8527b9268e87e182ad03fb61aafe79cb3a22a80278c48fab617aa9f03136882d650e8b5ea5192228c3
-
SSDEEP
1536:4fF/1OLzzHZLWHyyCZxZw0kqnxP1ML7ML:A1U3hWHaZzw0kKx6LQL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32c07b382a15e336270cbb773eb51a22_JaffaCakes118
Files
-
32c07b382a15e336270cbb773eb51a22_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 962B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE