Behavioral task
behavioral1
Sample
87a521f6a3033365d6c62b9eb240d7f5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
87a521f6a3033365d6c62b9eb240d7f5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
87a521f6a3033365d6c62b9eb240d7f5_JaffaCakes118
-
Size
539KB
-
MD5
87a521f6a3033365d6c62b9eb240d7f5
-
SHA1
631342d555ac61656a3678288e8dc4251561467f
-
SHA256
c2ff7de11b9b36a4cdbfa670e11b062cc6ea375ba985e5e86b250698d4f08692
-
SHA512
9c1b2a9b660f62fbc56bc63e00b105675e4d370f8590726da7f6d797b529b6eab0f926f7e3525ef0df688b0003463dff1e2207e03f4658a93ebaba813e4e650e
-
SSDEEP
12288:hdrajxZ5awl7DW/HgoWHBXhZLqh0nUHtC6f021aS:ha7DWIXGhCUHP02kS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87a521f6a3033365d6c62b9eb240d7f5_JaffaCakes118
Files
-
87a521f6a3033365d6c62b9eb240d7f5_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 215KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE