Behavioral task
behavioral1
Sample
89453b9aa3ae73c3dd741da526ae69b3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
89453b9aa3ae73c3dd741da526ae69b3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
89453b9aa3ae73c3dd741da526ae69b3_JaffaCakes118
-
Size
543KB
-
MD5
89453b9aa3ae73c3dd741da526ae69b3
-
SHA1
9aad7eac24d5162a1ab3ead34d1348618eecacb7
-
SHA256
a60ab79804d1ca649d930e262c7f84cac898b0f84d32e0e686216836e11fe59e
-
SHA512
bc23bbe6272bfb192fa4cb6024fbca89d4b3666f1fb51c9c2a97b71d68b36e2dd5722d7b5043368cf0c297d9f208a14199ce7fae1178c9b12eb5430bafe4c130
-
SSDEEP
6144:0GNV6B0bfMC5/P5k0OZK1xItgDHHeV1dj29e6YlFFiJOcETDLsuqoD4FOZUKUuO:0GNG0jMC5/21Zr8+FF1rsuqOBFO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89453b9aa3ae73c3dd741da526ae69b3_JaffaCakes118
Files
-
89453b9aa3ae73c3dd741da526ae69b3_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 222KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE