Behavioral task
behavioral1
Sample
4b38dc3f12cf5206a429f50c2b2eb07d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4b38dc3f12cf5206a429f50c2b2eb07d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b38dc3f12cf5206a429f50c2b2eb07d_JaffaCakes118
-
Size
451KB
-
MD5
4b38dc3f12cf5206a429f50c2b2eb07d
-
SHA1
09731a4792b21191fb0f4edabe4305785205dcf2
-
SHA256
13174a50a32ecc5f4a52281b1ffde7cb590c64f34c84534fa702d0bd649af45c
-
SHA512
48d000bd6400f00f2cd5b3efc15d8f85b52129fbb8493fcb5a338185412404e190131f1cc32f9e0ee85768c1a50221fdf80a4a2d7f3afdb1611c6a4e66550b78
-
SSDEEP
6144:a6f/84pSDFmVds7dR9kmYiuH6lhfQZ42jvvpxC8VJnGn7mgiqDKNuSM:3/7SD+dshRemDSZ5vvtVknfXeNq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b38dc3f12cf5206a429f50c2b2eb07d_JaffaCakes118
Files
-
4b38dc3f12cf5206a429f50c2b2eb07d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE