Behavioral task
behavioral1
Sample
b7dbf1afbf83471026fad09c46410ab6_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b7dbf1afbf83471026fad09c46410ab6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b7dbf1afbf83471026fad09c46410ab6_JaffaCakes118
-
Size
97KB
-
MD5
b7dbf1afbf83471026fad09c46410ab6
-
SHA1
03c2b06a6da9f7ba3f3f4963b8fe82934ffe6346
-
SHA256
e820b96d1a9537129ad36717ab1492ead74d2901b8b23946a85b26c4699879f5
-
SHA512
3dad7095951456ca499f7a631c6a3f12f744380198e6b3bb5d0cdb12220fbfa3d7ef5117c5c5a34873dae6eecdbeb395eabd2926d024491420d1668e7cc0289c
-
SSDEEP
1536:uCEgIW9ZDv7fygakhDn9fzSthxMisbEktCBC96OECVAikU3GEmsL7H5s9d:u+IWPT7fMk99fzStjMcqCBC9ku3G2NQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7dbf1afbf83471026fad09c46410ab6_JaffaCakes118
Files
-
b7dbf1afbf83471026fad09c46410ab6_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 190KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE