Behavioral task
behavioral1
Sample
c84a5971e4e14242296f52da53ed26f9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c84a5971e4e14242296f52da53ed26f9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c84a5971e4e14242296f52da53ed26f9_JaffaCakes118
-
Size
473KB
-
MD5
c84a5971e4e14242296f52da53ed26f9
-
SHA1
686efe7355d04ad8d57e4850e60fc6d76bfd54ca
-
SHA256
d52332abc1bcc2664fc854ae79e26429e2ae6656ff1f9d34eccbba45481c5cc8
-
SHA512
7517e874787914f626b818724907e31b57761a221a5931869cbcfb4e23c3afb394ae99bb88edc5d55595a61c5c57e5df8ca3ea4a0824f2ead2670b2b969208ff
-
SSDEEP
6144:a1z1qBSTcE3ouRp05H6UkNIDKp9DxM3z6gMJOsqOI:a1xB33RcDKp9D+eYsqT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c84a5971e4e14242296f52da53ed26f9_JaffaCakes118
Files
-
c84a5971e4e14242296f52da53ed26f9_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 188KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE