Behavioral task
behavioral1
Sample
73e26ac473f226f5478d8c07776c033a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
73e26ac473f226f5478d8c07776c033a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
73e26ac473f226f5478d8c07776c033a_JaffaCakes118
-
Size
542KB
-
MD5
73e26ac473f226f5478d8c07776c033a
-
SHA1
e78e056d8ab2c7f15aa0f5e934b08eec53532d11
-
SHA256
e228dd753d28f0f23a85f6c423b5db23ef8896c92d9e936e0d8d3dd8ed69b8fe
-
SHA512
442edd24b497ed47b74ba013c7e28704cc2c7a6b5c2b1ee3e059a449ef7a90b0478f0f60b934d3d85e2acd5721892fb49e6fae4a6acee6cc8689434b4cba3ff8
-
SSDEEP
12288:08DW8B7zDaNlsnk3x0mTLrysL/jArDmz:DDOlsnk+sL/jmm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73e26ac473f226f5478d8c07776c033a_JaffaCakes118
Files
-
73e26ac473f226f5478d8c07776c033a_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 222KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE