Behavioral task
behavioral1
Sample
d2895601bfd5055c88dcedb5afff8f5f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d2895601bfd5055c88dcedb5afff8f5f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d2895601bfd5055c88dcedb5afff8f5f_JaffaCakes118
-
Size
470KB
-
MD5
d2895601bfd5055c88dcedb5afff8f5f
-
SHA1
7874853fbd493dc358e5a5dfd0a9f0950ea1c95c
-
SHA256
3ddba3f5f8020a7947b4d039aa8d54f998801117780cf8dcbe469d7b26d677d6
-
SHA512
9cd798debfe86d149d594ffaff9b34c0fff6a8d430e8f70451687099f95847baa53e586e24831c09b034a5a8cce39eee71396773a98a8c5afce27f3efe13d8fa
-
SSDEEP
12288:lwyTJUmdOVwsvHQs12FnrLsIyAihZe6zUG:pTJDcVwsHQs12FnrZDCZ7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2895601bfd5055c88dcedb5afff8f5f_JaffaCakes118
Files
-
d2895601bfd5055c88dcedb5afff8f5f_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 189KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE