Behavioral task
behavioral1
Sample
732fb7f4ecf867e32d70b987fd7b17ac_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
732fb7f4ecf867e32d70b987fd7b17ac_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
732fb7f4ecf867e32d70b987fd7b17ac_JaffaCakes118
-
Size
543KB
-
MD5
732fb7f4ecf867e32d70b987fd7b17ac
-
SHA1
b9f3e278e7c2f01b2ee160ad716ab774eb0c3b59
-
SHA256
1aa655eb8fd659518ba8c209f2ac877a44e28bbaa669d52176f552031354fa56
-
SHA512
00aefd7f27bcb5c33a8318f5b9e8e01ab2f04a0e5103c984ba6b928a6cc272feeedfc214dd480be9352e31a4e0b9801f60a723d5d47550cf73fccd514b5b1120
-
SSDEEP
12288:mDg5Un0hXDle43v+q5iSsBi7PXqa9TUuKX+c:mwTle43Gqfaa9UR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 732fb7f4ecf867e32d70b987fd7b17ac_JaffaCakes118
Files
-
732fb7f4ecf867e32d70b987fd7b17ac_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 219KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE