Behavioral task
behavioral1
Sample
5f7f9df169eea0bafc22d98e6162b0dd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5f7f9df169eea0bafc22d98e6162b0dd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5f7f9df169eea0bafc22d98e6162b0dd_JaffaCakes118
-
Size
536KB
-
MD5
5f7f9df169eea0bafc22d98e6162b0dd
-
SHA1
ca7dc738799edd81606f408f3fc5480491304be1
-
SHA256
c17d8dd8392038928f0ee14921ac900e451a66b589ec0754b7d5bd744e0d8fe3
-
SHA512
3ad05d8500cfc4e90f7e10d9b717bfbedc486b778f461a51352b23077fef62a9071c0a5d2059717ce2dc9c1c7ababa867db6f7d778d6ace8ada5a438b346c90d
-
SSDEEP
6144:iCZO+YmQiIcAkPwVhLFlR+b6KzQ0NHm07yQ5id+IRTk10oM5ztI4lJcSks5c34R7:ipNmqc3EhXR+eoQC4k10X5m48u6GaQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f7f9df169eea0bafc22d98e6162b0dd_JaffaCakes118
Files
-
5f7f9df169eea0bafc22d98e6162b0dd_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 222KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE