Behavioral task
behavioral1
Sample
64030ea1be205c4f6fd86f7fb7c52f12_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
64030ea1be205c4f6fd86f7fb7c52f12_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
64030ea1be205c4f6fd86f7fb7c52f12_JaffaCakes118
-
Size
276KB
-
MD5
64030ea1be205c4f6fd86f7fb7c52f12
-
SHA1
cbd0f9e79ba3c05ad45fc83a912b21d9e715cbe9
-
SHA256
9c63adce2257a8eff398c61a76cef9682de7532191d23fd9d4c00755a136488d
-
SHA512
86cb376bbffd9bede488cbc293bd355191c88fca353aa5acf3b5e0673893e1bf43e4ff03403efc50e2b9e9fa36efae061cb053308844714902e51097859c543d
-
SSDEEP
6144:SvcR+/ORXd2GxXVg3IaQYIcGYpR5UBWZ21S260/sqAbBTfQO25MI2wL:wcrAwO4a/OYp4BWI19NgzRI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64030ea1be205c4f6fd86f7fb7c52f12_JaffaCakes118
Files
-
64030ea1be205c4f6fd86f7fb7c52f12_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 244KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 273KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE