Behavioral task
behavioral1
Sample
6a28a44dc53c0373e0de85338e717792_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6a28a44dc53c0373e0de85338e717792_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6a28a44dc53c0373e0de85338e717792_JaffaCakes118
-
Size
138KB
-
MD5
6a28a44dc53c0373e0de85338e717792
-
SHA1
0a4c4962ca16f533377ca05cdff008bb43994212
-
SHA256
2e3f25aee874525283697351d7d9d855fe1d54501983bfaeec57a742942bb384
-
SHA512
ac5531a1ff648d0fec789a37c5466339bcc4b393df08b8d959ab6707c7373ad97c0bbcb715f9d8555e33e5a141f43ae9f6bc9de06cbd2d67b8916521917a8bfe
-
SSDEEP
3072:Mf2afPXjRy9GaZwXLysZEIFHUUg6CoCosdM99di:MfrvjRdaYvZ06CoC5dM99di
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a28a44dc53c0373e0de85338e717792_JaffaCakes118
Files
-
6a28a44dc53c0373e0de85338e717792_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 312KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 215KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE