Behavioral task
behavioral1
Sample
4a8dded41b3b100d2df5f61427500bfb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4a8dded41b3b100d2df5f61427500bfb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4a8dded41b3b100d2df5f61427500bfb_JaffaCakes118
-
Size
297KB
-
MD5
4a8dded41b3b100d2df5f61427500bfb
-
SHA1
87ef5979beecc0bbcaa1c27eccb1661d5bfccc67
-
SHA256
09d1ed3a2512e8ba1d3d498ad0cf6f9b7e8038a31bca3d9951c1b8adcef3686d
-
SHA512
02434181b359155c2e4c176a62718f00180e8f5733e513067656fac942a482da6ebe0704e6d0fec8bd495d081568c37cb8c6002c193dddeb009c9bf40df263de
-
SSDEEP
6144:ZYDhB6ActM8FbPt6a15RGkPNJAcb+k2WzoPiML3AYRYAe5mYkl62lGe:i9BvctM85t35JPNJj2WzoRLQYRYzmYwp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a8dded41b3b100d2df5f61427500bfb_JaffaCakes118
Files
-
4a8dded41b3b100d2df5f61427500bfb_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 484KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 263KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE