Behavioral task
behavioral1
Sample
94b9c83e3453b879a685d48f8a43a505_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
94b9c83e3453b879a685d48f8a43a505_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
94b9c83e3453b879a685d48f8a43a505_JaffaCakes118
-
Size
469KB
-
MD5
94b9c83e3453b879a685d48f8a43a505
-
SHA1
b1ac9acdb225bdee6f2b9f3c23ec6670ca56dee4
-
SHA256
e5d5b6b27069de010459a11a1fdcbe6b8b6459ca50cc9f2c9c6efa24c83399ef
-
SHA512
a72be263597b0b618897b30ca3183a370961911acb539cd02fa54c56236efbe678b16d2b100ccb6e7f0286fd940022d140596a8b3a088fa405a18c356e232d2f
-
SSDEEP
6144:kn9c9PUJnctR6ZfObn5XJNs/dHApcJZ4XcK9gblmL++HsMPkH0:2iCFctR6In9Xvm4cKqb4q+MMQ0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94b9c83e3453b879a685d48f8a43a505_JaffaCakes118
Files
-
94b9c83e3453b879a685d48f8a43a505_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 189KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE