Behavioral task
behavioral1
Sample
d6df0d7e909796bdfc3b1d26dded9c15_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d6df0d7e909796bdfc3b1d26dded9c15_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d6df0d7e909796bdfc3b1d26dded9c15_JaffaCakes118
-
Size
465KB
-
MD5
d6df0d7e909796bdfc3b1d26dded9c15
-
SHA1
88f374c488801799251cc73ec011ef05c62f0868
-
SHA256
d3690acf5977eaeaf8359c238625aead4070511108f4c2d1f49216362f5aa155
-
SHA512
36f6f2fec9464a34b34b0d6adbe70b26255a78fe9d6714232e5a097f305922db2eabbd49308c4397ec3a80b319a0c3d41a44ac1b3cb995b7b86683c21e2ab349
-
SSDEEP
12288:AATEooMqY+w/QS6un1bs/958FftY02JJl:TT9CY+w/QSVn2158B65
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6df0d7e909796bdfc3b1d26dded9c15_JaffaCakes118
Files
-
d6df0d7e909796bdfc3b1d26dded9c15_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 193KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE