Behavioral task
behavioral1
Sample
759251489603d259d8d72b2a46fb3f7a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
759251489603d259d8d72b2a46fb3f7a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
759251489603d259d8d72b2a46fb3f7a_JaffaCakes118
-
Size
464KB
-
MD5
759251489603d259d8d72b2a46fb3f7a
-
SHA1
191713d4b556885853ef82d903bf8709f654b142
-
SHA256
2081e310ffea4ec8297d03bdb8d93f16a17f13ceae32321467fa8855b493e5da
-
SHA512
ba11ec59cbdf54494225187808d751de6c023f8e4cd094ce7393d76332c09fc00c2c430f0a0d9543a73778cd73edc9e05a4bf5d1fbd37a0a46a81937e4229188
-
SSDEEP
6144:3Mi4KTTC7n6oOqiL3I9H5nC6jDo7AVd13T26NN1kMWUSN:3Mi/CeDD8DokVbXNTkMWUO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 759251489603d259d8d72b2a46fb3f7a_JaffaCakes118
Files
-
759251489603d259d8d72b2a46fb3f7a_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE