Behavioral task
behavioral1
Sample
67e7d67925d8245185a8825ddddc6ff6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
67e7d67925d8245185a8825ddddc6ff6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
67e7d67925d8245185a8825ddddc6ff6_JaffaCakes118
-
Size
315KB
-
MD5
67e7d67925d8245185a8825ddddc6ff6
-
SHA1
1dc10a7990e3e110964a44838d1269be6c645510
-
SHA256
a3ce2125939e2a505d6cc5e18bdcca3ca6bfec302b16ebd00a4f0accde1db1ab
-
SHA512
ef3ca87c3a9a600393cb24fcd6c511083acf66c942fe5c5bed680ed0819b8e46d912c1e6a510836bbfa3b001497ae0ab26e254dc639b8c76ef9dbb996f9b048c
-
SSDEEP
3072:4qqVmLXpLW034D7llavm1InyZFfZ/pE+b:4qkwXFl3en8mayZBt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67e7d67925d8245185a8825ddddc6ff6_JaffaCakes118
Files
-
67e7d67925d8245185a8825ddddc6ff6_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 220KB - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE