Behavioral task
behavioral1
Sample
6353c5f3dc57968def7c1b7a18f3c665_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6353c5f3dc57968def7c1b7a18f3c665_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6353c5f3dc57968def7c1b7a18f3c665_JaffaCakes118
-
Size
470KB
-
MD5
6353c5f3dc57968def7c1b7a18f3c665
-
SHA1
b8723578b8a4294948990e7b528cef7c28f63be8
-
SHA256
31e1c14c7e5123c2b9d25171692046ec3ce6eceb169d6f9da3268f8436fdb56e
-
SHA512
a194b6d6b6c31222df506bb51002a19f44d5489316870f08ff8996bf4605413f654d8f57f2c7101b08a1f4151a806c18494eb81e7d62707354ffa581c4e31c2b
-
SSDEEP
6144:gW8jOyTnFNYcMjvb6s06y3IHkD8PObZJ282FZzc4fdydV+nyyMrDQ3wF7ZzgBP9x:gW1sFNZ3fBrbZE8WzFnwky7qTx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6353c5f3dc57968def7c1b7a18f3c665_JaffaCakes118
Files
-
6353c5f3dc57968def7c1b7a18f3c665_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 190KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE