Behavioral task
behavioral1
Sample
a07ce7f66655ce6c20c5feb70416ab51_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a07ce7f66655ce6c20c5feb70416ab51_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a07ce7f66655ce6c20c5feb70416ab51_JaffaCakes118
-
Size
469KB
-
MD5
a07ce7f66655ce6c20c5feb70416ab51
-
SHA1
81f2a853aa72cdc9e5469e11c3052bc9b79be3a6
-
SHA256
b12815fdec95e03083d1c7113d71376b7fde80451ee92e1f2faaf2c976d5a9f7
-
SHA512
4b043be2284ad15aa47ef010c31e018afa77c5f964fa70eb8537242bbc55ac33b5046d6ccd5f97d6188f415bb6dc379d94e31e6f5baebb86a1bccb80fc456075
-
SSDEEP
6144:tn9c9PUJnctR6ZfObn5XJNs/dHApcJZ4XcK9gblmL+GtzfulHUo/Sv:diCFctR6In9Xvm4cKqb4qGtzfuWoW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a07ce7f66655ce6c20c5feb70416ab51_JaffaCakes118
Files
-
a07ce7f66655ce6c20c5feb70416ab51_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 189KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE