Behavioral task
behavioral1
Sample
7622ce1ba7a4149945f365ca53c9ad50_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7622ce1ba7a4149945f365ca53c9ad50_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7622ce1ba7a4149945f365ca53c9ad50_JaffaCakes118
-
Size
452KB
-
MD5
7622ce1ba7a4149945f365ca53c9ad50
-
SHA1
621ab3595616441d16bafe2ac362e975e8ab82be
-
SHA256
31d5381a5d66998e1bab2dfb94626901c23de8b71c9c6035a7408885f33a0a3f
-
SHA512
10249346b3ee77cb7e1ad3245fbf28ad8d4fec9c1f0e0e7032343026a1c2eadd129763172c4292dd9fe526ada3244fd458873382b24c77c89e78fd9a5fcd9ec0
-
SSDEEP
12288:ygIS+ui6P0nLMaXgr5SMTR7Sn0sV+X0f0:yWNlGU4MTROn0h
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7622ce1ba7a4149945f365ca53c9ad50_JaffaCakes118
Files
-
7622ce1ba7a4149945f365ca53c9ad50_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE