Behavioral task
behavioral1
Sample
8ee35cc8f4f7939c8db5df94eec2f354_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8ee35cc8f4f7939c8db5df94eec2f354_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8ee35cc8f4f7939c8db5df94eec2f354_JaffaCakes118
-
Size
466KB
-
MD5
8ee35cc8f4f7939c8db5df94eec2f354
-
SHA1
763930c78a63c6afeca36990ba24a51363083a14
-
SHA256
86aee1cc4110dbc6731e205d3b027a5660d4116bf64d91fcd07b7ae0c3a7fd1f
-
SHA512
c974cd65483343d915747101a2871a1694b90c74cbace557bd1d37960976c57fc7b7905c5053eb263abbb68da5fbf38ef4d3718c0e5266f1912dc08efb93b7d8
-
SSDEEP
6144:5b2xcYJuQ5Pw5CSTsi53P0+bSbDrH9n8RZNgR9AwKvmaYZ+Ja/GV7K8x:5b2+OuQwVd0+bed6gR9Aw5aYZ+Jaozx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ee35cc8f4f7939c8db5df94eec2f354_JaffaCakes118
Files
-
8ee35cc8f4f7939c8db5df94eec2f354_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 193KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE