Behavioral task
behavioral1
Sample
61c052c959d3aa9d3310b78b7d832cae_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
61c052c959d3aa9d3310b78b7d832cae_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
61c052c959d3aa9d3310b78b7d832cae_JaffaCakes118
-
Size
163KB
-
MD5
61c052c959d3aa9d3310b78b7d832cae
-
SHA1
5b5b22ed3c4249d6f800802efc254f6c4c6de659
-
SHA256
81f27ca5a5edeadfa6b7c141fcbf2ca6449a55055ca8c94acd1040058af0c9bd
-
SHA512
85cbf9e375df359cfaa77eee6e08af9c4cf24090d09642f0c757840349de95ac15cb09548ac8d7f9812407f966aa0a220166554568acc7b24c55c009980d1747
-
SSDEEP
3072:vCaqkWrG3T+HhkQIuKKOgqTDURJWTeBQvUFYe/QHrDl5UeQp0+wQfPZE7XnHpMzT:KzG3yBk0GDU6eB1p/Yr3+wGZSnH6B
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61c052c959d3aa9d3310b78b7d832cae_JaffaCakes118
Files
-
61c052c959d3aa9d3310b78b7d832cae_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 684KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 262KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE