Behavioral task
behavioral1
Sample
a355f7f5c7d7ae82aff24a0e73ec7978_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a355f7f5c7d7ae82aff24a0e73ec7978_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a355f7f5c7d7ae82aff24a0e73ec7978_JaffaCakes118
-
Size
479KB
-
MD5
a355f7f5c7d7ae82aff24a0e73ec7978
-
SHA1
8833f768e291a809a18aae84e88b9e3cf211d789
-
SHA256
ce7ab8183c5114b7685d0042a9d678e1ee56d5e97fb4fcd0be2840492bffd25f
-
SHA512
7160550a0a8ef3c0a92544dad3beff80a275e000ceaf31babb44b2ce53c5e63866a393528f2c72d1999c246da356af674774ac3dbca67c93a19a04d114ee37fe
-
SSDEEP
12288:qX4m5ejYULdjH+av+hCpAbplRMEXughW9N:64m5iYULdjH+u+hYAbplBhhG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a355f7f5c7d7ae82aff24a0e73ec7978_JaffaCakes118
Files
-
a355f7f5c7d7ae82aff24a0e73ec7978_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE