Behavioral task
behavioral1
Sample
a02b9d21c002483206a73bf0fd10ce51_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a02b9d21c002483206a73bf0fd10ce51_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a02b9d21c002483206a73bf0fd10ce51_JaffaCakes118
-
Size
466KB
-
MD5
a02b9d21c002483206a73bf0fd10ce51
-
SHA1
06294adcb40ca7a10a8e80915eb112e50549871d
-
SHA256
c43b79e3ac60307970edf7b05770ecf7a953d2b64c53d541627646c7f5022ae7
-
SHA512
900b2002d9c7300a7187013125ef6b6ba87cdef8e7d2013b93e5e633490fdb5f21f823d6b053059086ccd3bb5f57ce41c199b53f7a32a059f6d2f8b5e8612d77
-
SSDEEP
6144:Fb2xcYJuQ5Pw5CSTsi53P0+bSbDrH9n8RZNgR9AwKvmaYZ+Ja/Gsy/kzv:Fb2+OuQwVd0+bed6gR9Aw5aYZ+JaJyM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a02b9d21c002483206a73bf0fd10ce51_JaffaCakes118
Files
-
a02b9d21c002483206a73bf0fd10ce51_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 193KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE