Behavioral task
behavioral1
Sample
a81948e19bdee7840e3504888b2bf2d6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a81948e19bdee7840e3504888b2bf2d6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a81948e19bdee7840e3504888b2bf2d6_JaffaCakes118
-
Size
69KB
-
MD5
a81948e19bdee7840e3504888b2bf2d6
-
SHA1
cce5fd7f0a451c5d50438730c5f73a163cff1f55
-
SHA256
ed983bec2262790f17903561d682d4fd10e3aca1745a24949d66fe055bd36607
-
SHA512
aaae88340442b4ca2faf442f08b23a4c5b5a7f2bcc0596ded12cac07d38efadd721f725482bc0aa2aa7ea1227c6261a0bc1d53e3f2ad0ded09ed9b6239e90561
-
SSDEEP
768:ZJktroP03qs1tQ9p5E6o1KOU9mJtLNwmPqdWzuO4WczRZF9QnRX21f2zRwRzNH1/:E2P05HIpr4amPqESLZF9QnND4hz1QIe+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a81948e19bdee7840e3504888b2bf2d6_JaffaCakes118
Files
-
a81948e19bdee7840e3504888b2bf2d6_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 230KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE