Behavioral task
behavioral1
Sample
35e9f8d823a906c35bfc7c098d02b4a4_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
35e9f8d823a906c35bfc7c098d02b4a4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
35e9f8d823a906c35bfc7c098d02b4a4_JaffaCakes118
-
Size
496KB
-
MD5
35e9f8d823a906c35bfc7c098d02b4a4
-
SHA1
ef869c6c5f712230d2a505a3cd38c27d36f572ba
-
SHA256
794ae08a41e207d8f2ca68033464a2d7464308e3a4bbd42ce9aebde7b8eeb718
-
SHA512
4bca2eb726798668eca859fce766312813f5b731476022a8da025d376b022a1e78e45441ce5ad1b6be94cb15ce1b3b820d6d8641c966a51117d82132443a0ffc
-
SSDEEP
12288:O0TteyR9YxeXBi/HZOUEBmC0j/evVgloNw3+cFclboS:O0Ttey0xeXBCHZOUEBl0/Xi66
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35e9f8d823a906c35bfc7c098d02b4a4_JaffaCakes118
Files
-
35e9f8d823a906c35bfc7c098d02b4a4_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 300KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 489KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE