Behavioral task
behavioral1
Sample
397019e0a6e56325b4a532d311acb219_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
397019e0a6e56325b4a532d311acb219_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
397019e0a6e56325b4a532d311acb219_JaffaCakes118
-
Size
471KB
-
MD5
397019e0a6e56325b4a532d311acb219
-
SHA1
5467e1b2f167fae4841103a8d8c2e21b08479b9c
-
SHA256
ad76626eccf4631d265c835373b22aaa3dc7ea88ea8fc5cb03df5abe5917e57f
-
SHA512
edf40d2023251353b7eb5f441d620b39ffc498317a93fd5e7e4ca9f4a032e5a587bbcca5b0032d3ea509ebe4f79f2f58011833499f02964279de72c3f4e6c207
-
SSDEEP
12288:zgiU0AnS3TvW3HTzuResYyQw+TrZJiT5Y2cKGakra:zghn0vDcsBsdU0ar
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 397019e0a6e56325b4a532d311acb219_JaffaCakes118
Files
-
397019e0a6e56325b4a532d311acb219_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 194KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE