Behavioral task
behavioral1
Sample
371328fba477d2609d5e8fee96775eb5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
371328fba477d2609d5e8fee96775eb5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
371328fba477d2609d5e8fee96775eb5_JaffaCakes118
-
Size
201KB
-
MD5
371328fba477d2609d5e8fee96775eb5
-
SHA1
c8017ae08567508000cd28f81b102625af899f4d
-
SHA256
906ca6d4057dbace6209c1ca2b88a5bdcce4138561397e1a57f0504ebee8c070
-
SHA512
09b4d97614ce9f0465277369981c110944d621f077b6df5e78d6114ed653bc3a0b541e47280363761422c5ca9747469bf0514bb789a2bc9076fa9f2b0356e02d
-
SSDEEP
6144:ckeENDvTSn2SV/GuhYdViC7X57+nM7vw8R:cNEND/k/GLPX57+nIvw8R
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 371328fba477d2609d5e8fee96775eb5_JaffaCakes118
Files
-
371328fba477d2609d5e8fee96775eb5_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 230KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE