Behavioral task
behavioral1
Sample
462ebc9e61353f15c18e2e7ae0456837_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
462ebc9e61353f15c18e2e7ae0456837_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
462ebc9e61353f15c18e2e7ae0456837_JaffaCakes118
-
Size
471KB
-
MD5
462ebc9e61353f15c18e2e7ae0456837
-
SHA1
8bc4e9c3cbb4c842d9b119501d548865d798b780
-
SHA256
5742bcc63a184fc38b7584757a5aa1cbbef49bb48fcb0388029779fa5d54b740
-
SHA512
c7a194555c5b87a63cf902a31763c65c78caaf5b4290ed9c43a3a4cc0891ec48c65b850af41c171da249cb949b29c2e062b103fa46aa2319dec11becca4d401b
-
SSDEEP
12288:NNaERrjHZXwQHXqDTI17B+9h5f8grkcZfRGICZl:7hrLZXwQCh5f9rkcZ0l
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 462ebc9e61353f15c18e2e7ae0456837_JaffaCakes118
Files
-
462ebc9e61353f15c18e2e7ae0456837_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 198KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE