Behavioral task
behavioral1
Sample
a8d1653bd8fdbfffde191d8c5a215263_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a8d1653bd8fdbfffde191d8c5a215263_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a8d1653bd8fdbfffde191d8c5a215263_JaffaCakes118
-
Size
471KB
-
MD5
a8d1653bd8fdbfffde191d8c5a215263
-
SHA1
bda70e28043857ec5fb5be39978f7cbcb35e061c
-
SHA256
62a31a27f8e5b065bb681de437648a763b31d2bbd4c6b71221b5dd697491a102
-
SHA512
27c3b80a1a43ab9487a95e8b53d7589b8950475a6e60758bd5f9b4df2e3f010985a89f36b7255dda8ea58ca6221306e3b6b6d1065f5d4a486235f8ae8edabee0
-
SSDEEP
6144:kMj208tqpQbbbiMZaHwz0huDlqt0E8fi8pLH6u3:9j208tjfioDlqt0E8fh1H6E
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8d1653bd8fdbfffde191d8c5a215263_JaffaCakes118
Files
-
a8d1653bd8fdbfffde191d8c5a215263_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 187KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE