Behavioral task
behavioral1
Sample
40e913601bd5bcb3b674fd0af7bf4a2e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
40e913601bd5bcb3b674fd0af7bf4a2e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
40e913601bd5bcb3b674fd0af7bf4a2e_JaffaCakes118
-
Size
470KB
-
MD5
40e913601bd5bcb3b674fd0af7bf4a2e
-
SHA1
bfa2bd334da2a3871fd862e6bb0fcb79c512eee8
-
SHA256
75be2db5f0190ad7844e87f6d42bf2e34d6296f7ae41a4205dbb5e30721577a2
-
SHA512
e27cb140d3d1fc02e4ee5c49af7e006cc4e02c1b163fe37fa7d3d99d9b73118c6a0317f9c00a82dd4517d1ad24ceb5b7c0180aac5f1f179cd7f8b630578d5841
-
SSDEEP
6144:m4pVJx3Zq0OY1G2Siwm7rHubEvQMZ60EeVVTVK4ZnoIB5m11PuQ+fB2:PvJqQ42qJlMZPEoTVKInC12Q+J2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40e913601bd5bcb3b674fd0af7bf4a2e_JaffaCakes118
Files
-
40e913601bd5bcb3b674fd0af7bf4a2e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 190KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE