Behavioral task
behavioral1
Sample
afa96ef977f84582d5af883e5fd28790_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
afa96ef977f84582d5af883e5fd28790_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
afa96ef977f84582d5af883e5fd28790_JaffaCakes118
-
Size
121KB
-
MD5
afa96ef977f84582d5af883e5fd28790
-
SHA1
78dfd3b0f17d9eef3a6f112a6ed866e67bcdf7ca
-
SHA256
28fa4e163694b30df43008bb39a7aa24850caf546c41819a807a58963f10c81b
-
SHA512
6d4b874d78512427682a75580aedcc7a0e409c5f7ac6a2fa46332a4578481d8fc50b5ff9eaf60bb828165ee1b1fb61509eb954b5cb7be587dc057a73c4c136e3
-
SSDEEP
1536:O+dqQm+1Bl0hhghQaSh9fHunmuZQzZVgM9vH5bWSTP9bXH52iGvOFEKuLWRcZu:lmu08+asfOn9ZQzgMNlfTBDruLWR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource afa96ef977f84582d5af883e5fd28790_JaffaCakes118
Files
-
afa96ef977f84582d5af883e5fd28790_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE