Behavioral task
behavioral1
Sample
751d67fcd5ff2845c14b467db5e5da61_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
751d67fcd5ff2845c14b467db5e5da61_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
751d67fcd5ff2845c14b467db5e5da61_JaffaCakes118
-
Size
544KB
-
MD5
751d67fcd5ff2845c14b467db5e5da61
-
SHA1
5d165920853175a2567e4c8b921329d70e4d894d
-
SHA256
831ffffb610b8a30f1ce0bc91e78fbefd321815aab7d686b87225e9633b4ce43
-
SHA512
eb4e983c31c995bd4af9aa5aac5ce95079a65f86f2fa157caff800fdb66af4d10982a485b942b6bb37a929f3568db6ae3c9d0c800e8d8e3d74aed9d8b553b823
-
SSDEEP
12288:VOhetBGQ/G1Fky7SwNSlTzJ+OfzltlGAUEYhkfaZ:Y2G1FkyxzmnlvUE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 751d67fcd5ff2845c14b467db5e5da61_JaffaCakes118
Files
-
751d67fcd5ff2845c14b467db5e5da61_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 219KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE