Behavioral task
behavioral1
Sample
c7ffd22fd00ed0683c592240dab0ace8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c7ffd22fd00ed0683c592240dab0ace8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c7ffd22fd00ed0683c592240dab0ace8_JaffaCakes118
-
Size
532KB
-
MD5
c7ffd22fd00ed0683c592240dab0ace8
-
SHA1
10b1f13b07edd73650e5cc1c1154cd2a117a8517
-
SHA256
fbdca6af1530fccbcbba926ab99484d75305aa4b90b751f0d46b921ff9a10cad
-
SHA512
7d65d30233675f7c290bec4640761c8253c2d7f1932ecfed1b2715e5d5e60ac45eaa6e9df57ae0b048a3b6de0feb8ede066ba3948198dfdc550264bdaf3a3d9c
-
SSDEEP
12288:E8DW8B7zDaNlsnk3x0mTLrysL/jwrDH0:TDOlsnk+sL/jWH0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c7ffd22fd00ed0683c592240dab0ace8_JaffaCakes118
Files
-
c7ffd22fd00ed0683c592240dab0ace8_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 208KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE