Behavioral task
behavioral1
Sample
b5132ec443cd4a6179fa68b0764a5baa_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b5132ec443cd4a6179fa68b0764a5baa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b5132ec443cd4a6179fa68b0764a5baa_JaffaCakes118
-
Size
283KB
-
MD5
b5132ec443cd4a6179fa68b0764a5baa
-
SHA1
098f704ba407185f773e37e82a11535ed2427d53
-
SHA256
3af09ebcf18a7b2b1c37eae8af87bc507b6ae5af68871b2d153461b5f0ef2962
-
SHA512
3a1422ae908de4617ea3589e9e8dd5349709b131db7ff2bdf2b4fee584c061379d565795d4b94a2eaed1475b80f2763839e844978d12083999c9206f443284b7
-
SSDEEP
3072:MIlqnuUnI6rgMC5BmjsH3kVBO0DurV3v5DEth9Z5cAe8aRkERe4cy/V/o:MTnjnvrM3mjHGh5Doh9Z5cAea4Jw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5132ec443cd4a6179fa68b0764a5baa_JaffaCakes118
Files
-
b5132ec443cd4a6179fa68b0764a5baa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 372KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 187KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE