Behavioral task
behavioral1
Sample
3451e9f0bb7ffc595f72c18b84de83f8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3451e9f0bb7ffc595f72c18b84de83f8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3451e9f0bb7ffc595f72c18b84de83f8_JaffaCakes118
-
Size
319KB
-
MD5
3451e9f0bb7ffc595f72c18b84de83f8
-
SHA1
90231d8e98cc66eb4d4d3b17297eb9952a73d7aa
-
SHA256
410297be8f5c0ac74c6bb351ee1589899fd33c7600a1e5f1fe447f2a80c4f820
-
SHA512
ed8c771be1e27fb5547df59a2ed79757abbc8199b55d9ac6973bdbd4b0d6b60eb507fd78b98b42a1ed429805ae1628127bb72b238761909411733e711e101d8f
-
SSDEEP
6144:4SrTXvEqpxbO4csrm2hDSYxt7aZP3VjiLPrl9X/4M8V6XZIRUhbs1PsRsGo3e4e/:4SrzvnpxbJdVeYx+svX/l8OeUdqPElUa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3451e9f0bb7ffc595f72c18b84de83f8_JaffaCakes118
Files
-
3451e9f0bb7ffc595f72c18b84de83f8_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 904KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 425KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE