Behavioral task
behavioral1
Sample
8ca06ca238c20dc92c715842781e04dd_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8ca06ca238c20dc92c715842781e04dd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8ca06ca238c20dc92c715842781e04dd_JaffaCakes118
-
Size
5KB
-
MD5
8ca06ca238c20dc92c715842781e04dd
-
SHA1
714913c45172043a782834b0f355d33b2045ac83
-
SHA256
1e14c8b19ddcd5cbb64213a56dbf7928b0fc576758b5c6e2a0380dad07c93612
-
SHA512
c6c19cdf981f65766be4c66436099431f8bb84496f3be3f1a7b6a03a42f86f6dcc9d8b79e162d3a94387d9941b94a7c19d0d49659820a9e3ceee5f24ddced64b
-
SSDEEP
96:DF8HKZ6Tc8RagTmoUxpnSZPpwrqKYAsMmCbXHCi:3Zmc8TbKnkPusaXii
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ca06ca238c20dc92c715842781e04dd_JaffaCakes118
Files
-
8ca06ca238c20dc92c715842781e04dd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 197KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE