Behavioral task
behavioral1
Sample
4711de5c37e5cf1c7abc27fa83c94903_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4711de5c37e5cf1c7abc27fa83c94903_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4711de5c37e5cf1c7abc27fa83c94903_JaffaCakes118
-
Size
475KB
-
MD5
4711de5c37e5cf1c7abc27fa83c94903
-
SHA1
e39da081a08bee7f6d68873dee863ca9eaf3c173
-
SHA256
731c048096b43997f1fa0dfcedb601b0b0f76fa8c04bf203d3bd2e6f26669138
-
SHA512
0a1468068b196ee7949fdeea3adf18c01dc05f1e12f057a279ded1fbf44113072e5bc363664b8ccfb3abd8ff44fe4384771b2c104da46ac548934e2db4a41a5a
-
SSDEEP
6144:PMkSc2bG4iNbXIcmgVHr6gBCCe5dl3dx3IsBX7Ag3GfEHlAxG6AgKq:3Sc21KUcmvCe5dlNNBX7AbfECs6zKq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4711de5c37e5cf1c7abc27fa83c94903_JaffaCakes118
Files
-
4711de5c37e5cf1c7abc27fa83c94903_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 191KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE