Behavioral task
behavioral1
Sample
776b017b137a700f7c77e37e6662315c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
776b017b137a700f7c77e37e6662315c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
776b017b137a700f7c77e37e6662315c_JaffaCakes118
-
Size
130KB
-
MD5
776b017b137a700f7c77e37e6662315c
-
SHA1
744431d9eb6069ecbb3686d24705afd3ab12b364
-
SHA256
c13aab7572907e37953412382e34b74f2adf6c4dcbfb7a99909c5bfeb033a789
-
SHA512
25bed2eef374255f4689a80593b8bdf583764d4218eaf9f5a6a6a46969b3202d97a4b6558293f0c64f75b4d7187de689064441660dd9c43312fd42d1fb35ec0e
-
SSDEEP
3072:+cYTlBHeqSotOmYFXFXHspwgye2rNeyzRlr7IxwAvETg+bal5UM:kHe3wOmYFXNohM3zzrMxwbg+bA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 776b017b137a700f7c77e37e6662315c_JaffaCakes118
Files
-
776b017b137a700f7c77e37e6662315c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 744KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE