Behavioral task
behavioral1
Sample
bcd42be3834cd6ffd07619e3dcf0c1ac_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bcd42be3834cd6ffd07619e3dcf0c1ac_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bcd42be3834cd6ffd07619e3dcf0c1ac_JaffaCakes118
-
Size
452KB
-
MD5
bcd42be3834cd6ffd07619e3dcf0c1ac
-
SHA1
685874080c31068397ae6e505c64c5dd29b3f29e
-
SHA256
c6f9ea6bec157adffc1526c0bebf62e913ad5c3089b84d315d9d954799ddc4d5
-
SHA512
8fc08e2d5874a8e3e5639c0e45e6efe6d09d2c15ce2f06b8e944c5577acb1ac45f6052d3a2ccad5781ce00f9e635670f3b8c8f830fa9a147bea0127fa8073577
-
SSDEEP
6144:9PoIhaL+uoXXFPlBgP0nLMaXZH2Aw8De00RSMT2A3J7SnJmtkvkbdg:9gIS+ui6P0nLMaXgr5SMTR7Sn0Ek6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bcd42be3834cd6ffd07619e3dcf0c1ac_JaffaCakes118
Files
-
bcd42be3834cd6ffd07619e3dcf0c1ac_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE