Behavioral task
behavioral1
Sample
d228be72c21aaf4ae6111e06fa7d0ce8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d228be72c21aaf4ae6111e06fa7d0ce8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d228be72c21aaf4ae6111e06fa7d0ce8_JaffaCakes118
-
Size
340KB
-
MD5
d228be72c21aaf4ae6111e06fa7d0ce8
-
SHA1
95ee368ab0fb828404178fd4b0db3d8d086f8242
-
SHA256
1aee28a188818e73354f762238ff5dbf77fa6482a0fcf2c10a5240a1092f1713
-
SHA512
b654b170f8e53fca09ecf5c056f2d20b60ee4c3bd5274fec6a6f642ab6a974720528e8bdaeed30fd6c6c8cc3171d4f03e579e4fb4ac29c8ed6eade1f2e05f876
-
SSDEEP
3072:FIlqnuUnyZYXTBwwDD0V3SAo4eDSB1cYgE3meaHTmWie:FTnjnlXTB5DD0V3SAoFWNmTHTmWie
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d228be72c21aaf4ae6111e06fa7d0ce8_JaffaCakes118
Files
-
d228be72c21aaf4ae6111e06fa7d0ce8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 372KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 187KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 152KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE