Behavioral task
behavioral1
Sample
88155bbc348f1f8a0e0aaa08d13c49e3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
88155bbc348f1f8a0e0aaa08d13c49e3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
88155bbc348f1f8a0e0aaa08d13c49e3_JaffaCakes118
-
Size
87KB
-
MD5
88155bbc348f1f8a0e0aaa08d13c49e3
-
SHA1
43d4c3c2ad3307cd388ad1375ade20a0fb8c5b6f
-
SHA256
74e2e7393d74cbe6650540d5c55ec0ed9fa0c57092af032c5ec8c4eb31169f16
-
SHA512
48727f03bc88ac7d7a42230b885d93fd9f13026396bbdcbf06320d31d159e11c32bc06e461322ced0d2f8089b8fc84362779baa1f9d80cbce00a04365c6ac6d0
-
SSDEEP
1536:q+RKIMvoeFa5W6zyXEOOxpuKIVnLcmKP+imqsIWU0LaCnouy819d:qn1weFY2POxpuK6nqJmZIWUgoutB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88155bbc348f1f8a0e0aaa08d13c49e3_JaffaCakes118
Files
-
88155bbc348f1f8a0e0aaa08d13c49e3_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 324KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE