Behavioral task
behavioral1
Sample
ce40ca41e4347a3ccc21e04e78287b36_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce40ca41e4347a3ccc21e04e78287b36_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce40ca41e4347a3ccc21e04e78287b36_JaffaCakes118
-
Size
537KB
-
MD5
ce40ca41e4347a3ccc21e04e78287b36
-
SHA1
2598b06a4bfa7dbb66136f6b42f8f1f526638e70
-
SHA256
32c97b182afb155ad0c3091113a4801b5ecf1658b47e30a5cce02061444898ce
-
SHA512
9fd5b49afc7712b7badbfe09ca7de6c23eb0b054337ada4bae3c82e181c5e4f7eb2d6bae418cb8eb2b4821aed10b98d81cf964edd6cbb4fb4a6dc5cb43df5f2e
-
SSDEEP
12288:Vi9U6jBSB5s7HMONWdjuzFONNJOOGR32wnLuN:89UasONYjJOOGYQuN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce40ca41e4347a3ccc21e04e78287b36_JaffaCakes118
Files
-
ce40ca41e4347a3ccc21e04e78287b36_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 217KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE