Behavioral task
behavioral1
Sample
8e65bd18f374267ce321bdbc22610efd_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8e65bd18f374267ce321bdbc22610efd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8e65bd18f374267ce321bdbc22610efd_JaffaCakes118
-
Size
543KB
-
MD5
8e65bd18f374267ce321bdbc22610efd
-
SHA1
14433e7e93a1b30df436448138fb2585f0e651ab
-
SHA256
4c67490ca93451364f90bb6dc1085aa65c548620c8286cae15d2a58feee76d5e
-
SHA512
c66412d0312f47a0a9c4af3e9452eaca42ff5eae121a9ebea996e0de5d78e30e522aff4c75ba566287fb7de42be7e3190f01b893aa79cdf636674f3ef5461eff
-
SSDEEP
6144:pm8tSjMcCFgjGFF2OpG1pmyi1jHetjJDIu8ubn7ZXi1vSnCUCktAc7Ubc8M:pmBegjGFrg1mqZXQqCU3AprM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e65bd18f374267ce321bdbc22610efd_JaffaCakes118
Files
-
8e65bd18f374267ce321bdbc22610efd_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 222KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE