Behavioral task
behavioral1
Sample
67bb29eddcead8427a6e2f8d73d365d1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
67bb29eddcead8427a6e2f8d73d365d1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
67bb29eddcead8427a6e2f8d73d365d1_JaffaCakes118
-
Size
431KB
-
MD5
67bb29eddcead8427a6e2f8d73d365d1
-
SHA1
074a7309aafd58c622d12e583efe0f64d7b9c30f
-
SHA256
7646c10e05b0e6ac6837af4c7bd91a6d2d40c32960b598544f1792f3359ef678
-
SHA512
709dc4467b30cae4df8c01da030af093a8c679fdd9ca8712b10ddb370ab324257f4a2976f12721a553cdb84a8c24350abbd9d7e448407cc6fb09bcd347b8c167
-
SSDEEP
6144:yMkSc2bG4iNbXIcmgVHr6gBCCe5dl3j+IsBX7Ag3mmjL7y:KSc21KUcmvCe5dlT2BX7AzmjLW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67bb29eddcead8427a6e2f8d73d365d1_JaffaCakes118
Files
-
67bb29eddcead8427a6e2f8d73d365d1_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 252KB - Virtual size: 252KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 167KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE