Behavioral task
behavioral1
Sample
655c55f5fcd6172f1589a03a412a6920_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
655c55f5fcd6172f1589a03a412a6920_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
655c55f5fcd6172f1589a03a412a6920_JaffaCakes118
-
Size
48KB
-
MD5
655c55f5fcd6172f1589a03a412a6920
-
SHA1
99a8ffb61e3ea119e160c03602aa7d921465ab93
-
SHA256
198cfcd9bfbe74e54672cea8e21dadd10e9244034bf390bac4bfb58766063a50
-
SHA512
aea5e8b39b546b3c6af6b124897b7820f552deb7109d4bfe57a7bc5187c7de6c877d0df3c9a05eb2981d70da25200130791276709630e3f3e51f9ee96b3e9a4a
-
SSDEEP
768:xkIZKGcwAu1Drn2DHnZv9SZoAOxKGrRXhYcr/oFfhnZVJ7sM8tPW7LqjbnbcuyDY:qdu1n2DzSSdKyF7OdPv7L4nouy8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 655c55f5fcd6172f1589a03a412a6920_JaffaCakes118
Files
-
655c55f5fcd6172f1589a03a412a6920_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 440KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE