Behavioral task
behavioral1
Sample
d2344f4a1cfd2a1cafb85afa8f2c2ce0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d2344f4a1cfd2a1cafb85afa8f2c2ce0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d2344f4a1cfd2a1cafb85afa8f2c2ce0_JaffaCakes118
-
Size
470KB
-
MD5
d2344f4a1cfd2a1cafb85afa8f2c2ce0
-
SHA1
656d6413a7e6e3cd71d621299e7cc9427182dbcf
-
SHA256
66efa3a581b81f0babedb0a53b38c41d0e5b75ca432ee88b2af9dce6fe0dbb2b
-
SHA512
4a3c6da64c82f34bdd8e293ccb5fcc81a7d162a93403167f57e579e65d92cddf81275c8bce3441e912ba305aabe1341b2d8de4152f9dbc88c4e1a9f6ca63d08e
-
SSDEEP
6144:4D1Om96imuOTmz0ignWc958vH5jc56L70zWoM90eRpA2DcB+28RL:MEm0i0BnWFFL70zWOeRC2A+2g
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2344f4a1cfd2a1cafb85afa8f2c2ce0_JaffaCakes118
Files
-
d2344f4a1cfd2a1cafb85afa8f2c2ce0_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 186KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE