Behavioral task
behavioral1
Sample
d3205157c9f405863b0d2711037b0d5e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d3205157c9f405863b0d2711037b0d5e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d3205157c9f405863b0d2711037b0d5e_JaffaCakes118
-
Size
466KB
-
MD5
d3205157c9f405863b0d2711037b0d5e
-
SHA1
fde601a55ca3cc49b7cca5afc231ee96077f48b9
-
SHA256
4dba22af289d222da8889b8427f5d684457b0d076f9b4f8b6d6a0651396642cf
-
SHA512
a34349f2107d2dfe0a6c0c6f890c968c8a672e722222c9080c901a635037716594b2abb7970e55218a02de6ecb7b22480e7adcc2040076b9fc6c9518c44419e3
-
SSDEEP
6144:KdzzeN0pGxtIMT3KdHMlicUzRU9pn41dHwk1C4BdM3U:KdPe12+KwwRU9pngtXdUU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3205157c9f405863b0d2711037b0d5e_JaffaCakes118
Files
-
d3205157c9f405863b0d2711037b0d5e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 193KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE