Behavioral task
behavioral1
Sample
399fb45f049e16b131071f1e73b30867_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
399fb45f049e16b131071f1e73b30867_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
399fb45f049e16b131071f1e73b30867_JaffaCakes118
-
Size
86KB
-
MD5
399fb45f049e16b131071f1e73b30867
-
SHA1
ee85a2e97874c1b8dbad655e18d545bd708d86f0
-
SHA256
d52a2f9e37a346422c5c3724079b87abfa0b9eb108c7043475f4ae51577c6477
-
SHA512
33c485049d8310655d18a072cb28d49b9154b93ce87a3f788543af22ede3f651d40d194bd7199b88f3b6214f4eb56b3782499a61949c1d5f414c6d1addb7cd7f
-
SSDEEP
1536:6N+R0cgvCaqIEErZgMVD0AWssfJs7THsSYuUWAJ/YzuHIhCwb:6Q+l6aDnZg1fNfJeF7U15HIv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 399fb45f049e16b131071f1e73b30867_JaffaCakes118
Files
-
399fb45f049e16b131071f1e73b30867_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 616KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 306KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE