Behavioral task
behavioral1
Sample
cf46b21e34e418f520eea69442c23725_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cf46b21e34e418f520eea69442c23725_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cf46b21e34e418f520eea69442c23725_JaffaCakes118
-
Size
804KB
-
MD5
cf46b21e34e418f520eea69442c23725
-
SHA1
7d24b754e2332d49fb6c4b8506c543463058184e
-
SHA256
c23779dca0dd1b3e6bcb142c06538ee4c547695fa4014a6ce72c86176409c397
-
SHA512
9d2922aa984968e09e1a236a4bd90d68097fe725c12d362532e5316562a77d1889649be5a5c27a6a39c87e7e0f19c2f21d4bb4df1918bcef4418891ae5877b2a
-
SSDEEP
6144:g5iEpJKwxsqH3FccAFnGH3b9R7HGe+I4fe0uxSXTuhehHRnWqLfEtbEIj+CZ:g5imy43GGH3b9RCe5HSXTvn3TEtbEIj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf46b21e34e418f520eea69442c23725_JaffaCakes118
Files
-
cf46b21e34e418f520eea69442c23725_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 167KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE