Behavioral task
behavioral1
Sample
635db40b1e2754b332deb815840d8805_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
635db40b1e2754b332deb815840d8805_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
635db40b1e2754b332deb815840d8805_JaffaCakes118
-
Size
936KB
-
MD5
635db40b1e2754b332deb815840d8805
-
SHA1
71b200469cc78e3e76dc565d0649a4e9b42f68ec
-
SHA256
e4266098d0bb993fa2af3f67e21659dca9af0955b71426a67211697b68f5342b
-
SHA512
28dc94409112c8717b808f2da10184f6c00b682252346ff3b829696413aecb89103d941036e1861ef55cee71960090657522470631e9e99b828a7e65e42e4fee
-
SSDEEP
24576:RrukSbiWEjlAHCSka4YEGubblIkhHJGyIEIGaVTe+Px7:RdKiWriSF4dvlPIOMTeMF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 635db40b1e2754b332deb815840d8805_JaffaCakes118
Files
-
635db40b1e2754b332deb815840d8805_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 932KB - Virtual size: 936KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE