Behavioral task
behavioral1
Sample
4dadf29a25b2527ae2718d9d2938e249_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4dadf29a25b2527ae2718d9d2938e249_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4dadf29a25b2527ae2718d9d2938e249_JaffaCakes118
-
Size
128KB
-
MD5
4dadf29a25b2527ae2718d9d2938e249
-
SHA1
008d9c16388c3c99e229ee79d28bae7adae3ad51
-
SHA256
4195387dc3c44fbb178692ac6ee30a6452a19f2b71fa129cbf6c605965626708
-
SHA512
96a7aa151729e90d3e55f75db023830b2b64b42c8b70cd3f8716883da5b7e9dea208b0c3ec7cb85fc647f97489dc1adb4c8067680058fda413ddc431afd55082
-
SSDEEP
3072:8KhS9iQmzUXgRTXNShsgSwgmQmi1ai6/45v245W:thhQmXTdpmQmaax/45v1W
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4dadf29a25b2527ae2718d9d2938e249_JaffaCakes118
Files
-
4dadf29a25b2527ae2718d9d2938e249_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 189KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE