Behavioral task
behavioral1
Sample
d09a52cd63bced240ef1cd385198355b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d09a52cd63bced240ef1cd385198355b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d09a52cd63bced240ef1cd385198355b_JaffaCakes118
-
Size
480KB
-
MD5
d09a52cd63bced240ef1cd385198355b
-
SHA1
060f8639f3d197666879071d340a442f46ba5087
-
SHA256
b4b884ebfb45289af3638bde0fa0b2d9eae5f09246fca219773b8de5e7e79a51
-
SHA512
19d9c24cb94c6dcbf18e6a9ba8ea481778c05d243e6bccd02de925c56490382d90a3982d973be9652c5d8a7a505d0d6eb6058d118196db237f54d3a78d4c55d5
-
SSDEEP
12288:KaVTU7tOViCNDzfAs6Ms1Zvn/Ik/bkuZ5:KmV7ndNs1Zvn/Z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d09a52cd63bced240ef1cd385198355b_JaffaCakes118
Files
-
d09a52cd63bced240ef1cd385198355b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE