Behavioral task
behavioral1
Sample
c1e7cd0c225c83a63c23eec5a5398736_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c1e7cd0c225c83a63c23eec5a5398736_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c1e7cd0c225c83a63c23eec5a5398736_JaffaCakes118
-
Size
543KB
-
MD5
c1e7cd0c225c83a63c23eec5a5398736
-
SHA1
6b0c025157068e5397dafe9aab6fc5fd519d2fdc
-
SHA256
18965b47716bbf3a768515908627992d6a79e02f637d4e3db6b819f075cc46a5
-
SHA512
81380f9a69988585f6a64baadae3b1e819661133fe7b36edb451c4044a2a1bac0ac50a6c1720c8e1699976fdf27312940f96d6bc4bafd9e83cb450794fb572e4
-
SSDEEP
6144:pxd0r+zwr2rNy8daL6ku/GWSHaXCMMN+3rhmBF9Z9wBjux41SkxHS3vIcM:LdHsr2rNv6aGTSIF9YUx4If9M
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1e7cd0c225c83a63c23eec5a5398736_JaffaCakes118
Files
-
c1e7cd0c225c83a63c23eec5a5398736_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 222KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE