Behavioral task
behavioral1
Sample
a12574a047c4bbd86a988ce29232e31b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a12574a047c4bbd86a988ce29232e31b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a12574a047c4bbd86a988ce29232e31b_JaffaCakes118
-
Size
444KB
-
MD5
a12574a047c4bbd86a988ce29232e31b
-
SHA1
354164b127953c5e1c7163465216635cb60a5bae
-
SHA256
7a409a5c9e7930f0ddb1dcbe7a87d107d7adf8783e54dc3a4cb3788151998414
-
SHA512
6b60474af5e4c6fb913ace1414ee6dc2610a0fcb88c6dd7b8392018924a2ecbe4024c1ecc491d56f1b8da35a1d0758874907972a61d4c787f830a31726f32e81
-
SSDEEP
6144:Nx2zM4qHacdIiKL0Jow78+HpQ6fIqEEviEI21Fuxn3EH5QXMlVBWjwQqj4:Nx2zMzmiTowfIq3viEFqnIGXIrIwQH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a12574a047c4bbd86a988ce29232e31b_JaffaCakes118
Files
-
a12574a047c4bbd86a988ce29232e31b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 173KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE