Behavioral task
behavioral1
Sample
411369072bcfc64fd6f4361e0818828b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
411369072bcfc64fd6f4361e0818828b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
411369072bcfc64fd6f4361e0818828b_JaffaCakes118
-
Size
83KB
-
MD5
411369072bcfc64fd6f4361e0818828b
-
SHA1
b1858e65c417004261ff845c643a41b5364576e8
-
SHA256
429d0ac865118b563a62ecd86b3ad68bd1a447f9e142d32c328f5d7b0c29842f
-
SHA512
26288d7ae05dc409fb66a049482a5d041e464f53e034aff0b407f44062f7f9b3083243f0b84b59854b5a329e92018a0f3fee066fb057c98cb36ce9bc308acc48
-
SSDEEP
1536:L6fSei8BVaevfkm668edM6r3I/SisLhFwehcNltyjXOjdOdEt2hjsRAo8aHnouy8:eSei8rnkQb3I/SHBhebgkOdk2hjsiEHZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 411369072bcfc64fd6f4361e0818828b_JaffaCakes118
Files
-
411369072bcfc64fd6f4361e0818828b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 444KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE