Behavioral task
behavioral1
Sample
43d07988e1b20d662be79e1bc7a80f30_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
43d07988e1b20d662be79e1bc7a80f30_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
43d07988e1b20d662be79e1bc7a80f30_JaffaCakes118
-
Size
469KB
-
MD5
43d07988e1b20d662be79e1bc7a80f30
-
SHA1
5ec4a207e0fb9c2bbed1af01b63621df97de377b
-
SHA256
817b6bccaa92b32ebf9f5f2043603cfc0899d40fd7221abaee38f5000bf26099
-
SHA512
b49c3b5c72143a8fd18072292493c6e4af17e86c815716eb4a5427dbf193705de355efc061c2e0ac1f7a5d93298d5391f02029a0acb8214e076660623cc8053e
-
SSDEEP
12288:GqIiWq4j4rm7IZsuVAMV932PnmX4SZCqG:GviWq4jUm7CsuV8Pnme
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43d07988e1b20d662be79e1bc7a80f30_JaffaCakes118
Files
-
43d07988e1b20d662be79e1bc7a80f30_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 190KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE