Behavioral task
behavioral1
Sample
703f3345bf92e66b6c1d4e2182f007d5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
703f3345bf92e66b6c1d4e2182f007d5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
703f3345bf92e66b6c1d4e2182f007d5_JaffaCakes118
-
Size
3.4MB
-
MD5
703f3345bf92e66b6c1d4e2182f007d5
-
SHA1
cbd1ac968e1bbdae8d9965f550406882a0b307d9
-
SHA256
929c74e77c73b114f4e3a0d58e4454f0e1057ad89b659293925a13ab159abe5a
-
SHA512
eb3d3f73f4e0e4a5a734d5571707cb6e97c3eed3851d262ba09580462449f7839e42fecb13dd18d514319c33da6c31daba2265b1fab9d652c71914c72a4021d4
-
SSDEEP
98304:jiwE75sDVcPqzq0VAJIi6IyjzEpXBSfuV8KZEPe0z7:jiR754Ciq0VG/y2037
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 703f3345bf92e66b6c1d4e2182f007d5_JaffaCakes118
Files
-
703f3345bf92e66b6c1d4e2182f007d5_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE