Behavioral task
behavioral1
Sample
884d10552b012c6297624f6bac0f8fc1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
884d10552b012c6297624f6bac0f8fc1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
884d10552b012c6297624f6bac0f8fc1_JaffaCakes118
-
Size
538KB
-
MD5
884d10552b012c6297624f6bac0f8fc1
-
SHA1
04b68b6fbfebd855dd3b491208d478f818af8d80
-
SHA256
7f9763e9d934391c44f6d642836f8860ef97518cb52cebbdf6446f0b3bc5e317
-
SHA512
af5251657d61b5c9fabffa3b1565ecccad1a014a35ab0aba6e17f44a0255cc942183966d0f889a6c715ff33eac4b94e418c7c4a769ca35fa06f34e69cbabe022
-
SSDEEP
12288:vrwpzN2WIHTDHkV1J01JEwIyr7CLnr1hjWD:jbTDHkVjKr7CLnjW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 884d10552b012c6297624f6bac0f8fc1_JaffaCakes118
Files
-
884d10552b012c6297624f6bac0f8fc1_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 217KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE