Behavioral task
behavioral1
Sample
7907da558a43c56003f2fa1865ce2600_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7907da558a43c56003f2fa1865ce2600_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7907da558a43c56003f2fa1865ce2600_JaffaCakes118
-
Size
22KB
-
MD5
7907da558a43c56003f2fa1865ce2600
-
SHA1
10d958125b86be1a1e7d99d9cc19486bd24d8381
-
SHA256
b22c15e91c1ad16f92268256df5b09b4cc95fbd24876eddf7ca685e515da41ce
-
SHA512
28d53a21770c3ec5b1535244440ffda1ddea6a117bad180c54517b4884ea873fdf006284b6432c0999ea315d6917302693429bbf1e2acdf6ad0cebbe5b417678
-
SSDEEP
192:giAJaJP9nh2JHD5vQAKzZ0uG6wlHSWiglC0ZRO/bWEsa8HRtMYOWqYUe/2ZopM/7:Fv9n8R5vazynUSO6Es1RBOWqe/CUbk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7907da558a43c56003f2fa1865ce2600_JaffaCakes118
Files
-
7907da558a43c56003f2fa1865ce2600_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 412KB - Virtual size: 412KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 307KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE