Behavioral task
behavioral1
Sample
671cf9afd22e01dd4f3bb497b76ddfa7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
671cf9afd22e01dd4f3bb497b76ddfa7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
671cf9afd22e01dd4f3bb497b76ddfa7_JaffaCakes118
-
Size
192KB
-
MD5
671cf9afd22e01dd4f3bb497b76ddfa7
-
SHA1
bc8efa4ad047ccd55d5ec24f2f799b5ce23c69a7
-
SHA256
7a2917321262112a178b4ae41b518a85a5c4d3b1c4656dd22750c6b4efab948f
-
SHA512
63e680cc04bd8c5204f53ebc066b5f80f7a2a37585c71930f825a0466ceee0a3d7236dc92d4ab4e7030cb0a58647c8d1094ba5aa51bdfa60fca30b96d88853bc
-
SSDEEP
3072:Gh6nNO4WbZ0VPsIwB6LjKd5eY/gCku3vAYWt79LYgdJzF0leA+8xmm+UqhOyxUhL:GknN4CVUIm6uk06ZLYgvBA+8xmrxgmA3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 671cf9afd22e01dd4f3bb497b76ddfa7_JaffaCakes118
Files
-
671cf9afd22e01dd4f3bb497b76ddfa7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 272KB - Virtual size: 292KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE