Behavioral task
behavioral1
Sample
33ab6384ab13a51949e5c74509daf112_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
33ab6384ab13a51949e5c74509daf112_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
33ab6384ab13a51949e5c74509daf112_JaffaCakes118
-
Size
460KB
-
MD5
33ab6384ab13a51949e5c74509daf112
-
SHA1
25bf77d8eff4b6313f414ef73177d7426df7d2f8
-
SHA256
2ced90cd544b3c95bdf12785c8ae0baf149d93d7239fc634bfc1933bf9b3e81e
-
SHA512
894b5a2a9f0d8a000e5b8769f854a93d0b7c7f544e077986ceb0961f1cd19849204b282bd58bae77ade3a25bf68c907f8ef990aa4edb158da54b4bde805f2f2d
-
SSDEEP
6144:fkGE7+mMElpDKdjARTxopN6ay+5FAaT3GtZ5wpmt6dGlkfkMlz8ksy1gpG:fs4dURTxoj6a92acO4kfLRiG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33ab6384ab13a51949e5c74509daf112_JaffaCakes118
Files
-
33ab6384ab13a51949e5c74509daf112_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 371KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE