Behavioral task
behavioral1
Sample
622e1600e0d5b6c0204544eb5a4edd54_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
622e1600e0d5b6c0204544eb5a4edd54_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
622e1600e0d5b6c0204544eb5a4edd54_JaffaCakes118
-
Size
418KB
-
MD5
622e1600e0d5b6c0204544eb5a4edd54
-
SHA1
7e0990c48a52cbf92df22adc847feb1f03488305
-
SHA256
1ead0c60aa3b9653f6aff886e5aa70de2ea8e59da86ac06f1107f187e77fdc2a
-
SHA512
c27f515bcf0e9dbfb4690f6921ff7ee0083b6b3a1bc3894add203cfa27099046a1666789a385e4a4cd74bd24a1088acde99d1e849ab597bed72208266eaa86c2
-
SSDEEP
6144:mfiyxNdnQikJYLDOR/b4r/HHa3R0kIZWzuVAMin932Pn3WXXzmxeaO:mKqIiWq4j4rm7IZsuVAM8932PnmXue9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 622e1600e0d5b6c0204544eb5a4edd54_JaffaCakes118
Files
-
622e1600e0d5b6c0204544eb5a4edd54_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 162KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE