Behavioral task
behavioral1
Sample
71f4e72359da7b22db24e9acbb7d2d06_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
71f4e72359da7b22db24e9acbb7d2d06_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
71f4e72359da7b22db24e9acbb7d2d06_JaffaCakes118
-
Size
462KB
-
MD5
71f4e72359da7b22db24e9acbb7d2d06
-
SHA1
e4cea3b9388f487bb162a20d993336d1a97c4e57
-
SHA256
3781c1af72e512499f91944e02d59562aa0b25ef0d6f94382b1f225021b2fc08
-
SHA512
ff8cda3b1a930a36bfd9948a661f539248b44e525099d0edda01452c8997594d22eeefa564267771b3e66a647886265b7674f50655ccdf38ff90c0c32ad7281b
-
SSDEEP
6144:V/5QpQDs5BxiWdAJqcLF1QEYH8DcOeZUqlPEZtJJS/FvLBRd+p+T9:V/qmDsZBK9KE1YUqlPEnJJCvLB7A
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71f4e72359da7b22db24e9acbb7d2d06_JaffaCakes118
Files
-
71f4e72359da7b22db24e9acbb7d2d06_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 189KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE