Behavioral task
behavioral1
Sample
3551ad37c084243a188f227dd411d47f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3551ad37c084243a188f227dd411d47f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3551ad37c084243a188f227dd411d47f_JaffaCakes118
-
Size
105KB
-
MD5
3551ad37c084243a188f227dd411d47f
-
SHA1
9de86dc374bb86be5b4c8172e88a167e14c75646
-
SHA256
c053beb4e7888f3dc94c2e2e8add8ac9128f889867570deac9d503edfcef169f
-
SHA512
fe7d6c61d6655d9847df50678cbd3b8e7dfc37329c778a033f2227820d7174bb168b695cc9822a63f72fa96dee2a09f187303553abb3b173264c614e4ebe4fcc
-
SSDEEP
1536:Zh1QBu4ZEbq2CGBa1IJCgCwuk8bMATfGrGfUb6WrOE0NeDeeeYeBUkC6bc0GGyMo:Zh1QObuGBLF89+rEjs0gDpd4C6bploxH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3551ad37c084243a188f227dd411d47f_JaffaCakes118
Files
-
3551ad37c084243a188f227dd411d47f_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 468KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 263KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE