Behavioral task
behavioral1
Sample
7630ee3300e01003a2c4a029d0115359_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7630ee3300e01003a2c4a029d0115359_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7630ee3300e01003a2c4a029d0115359_JaffaCakes118
-
Size
474KB
-
MD5
7630ee3300e01003a2c4a029d0115359
-
SHA1
8c75919edf8059c1ba343c544aa40d29d62acf62
-
SHA256
28ea71b22cf78664aa23a324f7b57c9c74532f493b6d939833ba025143102341
-
SHA512
355292dca60f8e828003f3314fd8f344bc53b8cfd85b04b0afb702074b64c1152204c516e00017945fa471f34078c8c70d3c85658062fb3137cea276c86aaa5d
-
SSDEEP
6144:hOSVsm4SPLC5D8D+EpAHT5tFwTDF5bJ8X7PqjNbO+Qj9VxWvYVg8:hOSVsu+N8D+yDF5b6LPq4t9VxkZ8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7630ee3300e01003a2c4a029d0115359_JaffaCakes118
Files
-
7630ee3300e01003a2c4a029d0115359_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 189KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE