Behavioral task
behavioral1
Sample
700d827ed9173411a96796a3cee74db4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
700d827ed9173411a96796a3cee74db4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
700d827ed9173411a96796a3cee74db4_JaffaCakes118
-
Size
71KB
-
MD5
700d827ed9173411a96796a3cee74db4
-
SHA1
cb5e5d4b06e45c49af716ca8011bcc98639fe78d
-
SHA256
d7f102cda32864f3e32937b33704f333d8bd87231abd424557b305fb9ba88c5f
-
SHA512
02662fa08f976d0317c87fb2c7c0e76e533b4bbafb1278e83d96e46e502c60c2d66be3d5786dad1048a4178f97498505629b4a9bfeb43cde81cd8ce618b8efe6
-
SSDEEP
1536:DG8VH3U7zF9U3JQ/0ZeSRbx1LAZ8BGz4vz0uF+zhg4B4AWtfdmubE:DG8VH3UP+eSREsz0u8hgENFj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 700d827ed9173411a96796a3cee74db4_JaffaCakes118
Files
-
700d827ed9173411a96796a3cee74db4_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 148KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 214KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE