Behavioral task
behavioral1
Sample
ceab225425d012d5c05008eb2ca6ee11_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ceab225425d012d5c05008eb2ca6ee11_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ceab225425d012d5c05008eb2ca6ee11_JaffaCakes118
-
Size
468KB
-
MD5
ceab225425d012d5c05008eb2ca6ee11
-
SHA1
3fb2991de8e9975db630a870ce0ae7a77e1fbb99
-
SHA256
ddef3d806a35b3537266cdbc7a85a1003357770d2fbc172cd9830bcee05ac023
-
SHA512
cb61b44d65c05f1676cd871538bc6f9b427762225b45eec1d71c819f9857337b8e7b48b519d69592dfc4c7d4e5c81629e329c6ed90d032db7d588c4e747b3feb
-
SSDEEP
6144:ab3WzYegDQnvnR92X/NDkk3V5UA35opnGIHMStghy9iLCAq2DrbaZU+Fre:GQpw1J335opnG099imAVWDY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ceab225425d012d5c05008eb2ca6ee11_JaffaCakes118
Files
-
ceab225425d012d5c05008eb2ca6ee11_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE