Behavioral task
behavioral1
Sample
86ef57118753bf85fbeab9f292e3ddcb_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
86ef57118753bf85fbeab9f292e3ddcb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
86ef57118753bf85fbeab9f292e3ddcb_JaffaCakes118
-
Size
470KB
-
MD5
86ef57118753bf85fbeab9f292e3ddcb
-
SHA1
56f471eb03535c6416d55ca2ce70d0fde46722f7
-
SHA256
8c36d347c617de45065385640e3055bf70426c51638604304b6ea5a2838e94b0
-
SHA512
aabcfdc2ba9a1071e9b35e13dfceca3d6ab4f751813d1c5d6d0bdd9e822ef92815f7a55d2de1f11198aac1915724ec51f2a22939f321a58dd5e3a439541368db
-
SSDEEP
6144:UD1Om96imuOTmz0ignWc958vH5jc56L70zWoM90eRpA2Dcl5Z0wHA2OvQ:4Em0i0BnWFFL70zWOeRC2YZ0wgHv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86ef57118753bf85fbeab9f292e3ddcb_JaffaCakes118
Files
-
86ef57118753bf85fbeab9f292e3ddcb_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 186KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE