Behavioral task
behavioral1
Sample
413d7e458b0d6a154433946daffcc7a9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
413d7e458b0d6a154433946daffcc7a9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
413d7e458b0d6a154433946daffcc7a9_JaffaCakes118
-
Size
210KB
-
MD5
413d7e458b0d6a154433946daffcc7a9
-
SHA1
7be07ce529ef3c3d538f19db0af9012d56eebd3c
-
SHA256
91c5247e8a9cc93c3f9e26aa7be187f93d7a4fd5f6d72c48609480407ba5089c
-
SHA512
89fdf6f9dd4fd85e5874f5f137c272a892603d2c31329af9202f860c4f724d5a30a79532497f12af3f82d50a72588c8aebe9b447ce958e83ee566d8f30d0ff50
-
SSDEEP
3072:crYC8V0zGbr4QfL6zykxITkQD7nZrjhAnJKwKG:cYr0zGIWLwoDlrtaJKwKG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 413d7e458b0d6a154433946daffcc7a9_JaffaCakes118
Files
-
413d7e458b0d6a154433946daffcc7a9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE