Behavioral task
behavioral1
Sample
71c00b973a22c042c0dcaeb2581d448e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
71c00b973a22c042c0dcaeb2581d448e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
71c00b973a22c042c0dcaeb2581d448e_JaffaCakes118
-
Size
543KB
-
MD5
71c00b973a22c042c0dcaeb2581d448e
-
SHA1
681d8314c73f0a14aee08d4c6cee3cded3326d60
-
SHA256
09c1bfdc2e7f24e77e617ce6c69a58f17790cc1ed142fe38a2a5500fbd0515f8
-
SHA512
51d687e60e415eff6376c8b18b07d1d1512abe6237274964e87eea3d7469725913551c43dc3a2535d8961c5af66002c1931f123bba6fe1592ad73137e6ae4eac
-
SSDEEP
6144:cm8tSjMcCFgjGFF2OpG1pmyi1jHetjJDIu8ubn7ZXi1vSnCUC2igfPmokF5:cmBegjGFrg1mqZXQqCUc7F5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71c00b973a22c042c0dcaeb2581d448e_JaffaCakes118
Files
-
71c00b973a22c042c0dcaeb2581d448e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 222KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE