Behavioral task
behavioral1
Sample
b71b2c3026fe89ca78fbe6e999ed7d91_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b71b2c3026fe89ca78fbe6e999ed7d91_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b71b2c3026fe89ca78fbe6e999ed7d91_JaffaCakes118
-
Size
539KB
-
MD5
b71b2c3026fe89ca78fbe6e999ed7d91
-
SHA1
c4f7b9ac8ca6d7eec579bb7b4dd412167f95dbf8
-
SHA256
49f2542f953740a65b1dd4d8e577d0a5a42434c04197a5eed6cc8aad204f86ce
-
SHA512
82a31b8e83e542341494b4794dbfd062153479d732b92ffafdc54957e50bc2f3fdbaacb248d044497eec8dbe32a6c2012fc8a2f74f0902ccd61ca9503f11a4e5
-
SSDEEP
12288:ghXFjJpL0EgYSP7hu5kC6Kj1qnbOUOA16Zzlas:uqiSP70xknSUOA16Zzlas
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b71b2c3026fe89ca78fbe6e999ed7d91_JaffaCakes118
Files
-
b71b2c3026fe89ca78fbe6e999ed7d91_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 214KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE