Behavioral task
behavioral1
Sample
42cb6ec08b5c206367cbf40de376d53a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
42cb6ec08b5c206367cbf40de376d53a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42cb6ec08b5c206367cbf40de376d53a_JaffaCakes118
-
Size
255KB
-
MD5
42cb6ec08b5c206367cbf40de376d53a
-
SHA1
072112a7a28f0b87c9417624bea09cddcddaf2aa
-
SHA256
71b89f11c69110893288d16d199913129c5038185c99b3b89a6d33b8ed519cec
-
SHA512
8bb3f9f7cb7c101a2d685c099de13a7b90038a238130849220707db1a6ed4f078e4e96565f2648059ae187f98db15945cb172169bdd3d6bd4b1e317fd5e32dfa
-
SSDEEP
6144:ih/gG9LTQxY2OR5FboBZ3rcXPdlPIRjz37oS:i+GdcxdOR5F6cV9AzLoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42cb6ec08b5c206367cbf40de376d53a_JaffaCakes118
Files
-
42cb6ec08b5c206367cbf40de376d53a_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 868KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 251KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE