Behavioral task
behavioral1
Sample
ce9724d5b7048f5a2d2dcdf19d08d065_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce9724d5b7048f5a2d2dcdf19d08d065_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce9724d5b7048f5a2d2dcdf19d08d065_JaffaCakes118
-
Size
474KB
-
MD5
ce9724d5b7048f5a2d2dcdf19d08d065
-
SHA1
8bac6c5a6726f746693676352397ad65fba936eb
-
SHA256
2810ec821aa4a4e5d8272dee4a878b1afc5561f607f7a4aaa3ae14e2990dbadf
-
SHA512
9ca2eb2f23b420aacaa060ce0e926102d5da9f66db8cabfd36721a9fbb5639be6fd5864740f2668417c27a50e38d17a35c0b45a6f46e2f79b33da63f89efbc54
-
SSDEEP
6144:E1z1qBSTcE3ouRp05H6UkNIDKp9DxMmX6z6gMJ8f5UB1io:E1xB33RcDKp9Dzqe45UB3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce9724d5b7048f5a2d2dcdf19d08d065_JaffaCakes118
Files
-
ce9724d5b7048f5a2d2dcdf19d08d065_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 190KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE