Behavioral task
behavioral1
Sample
d6d31ef980fd679a1ff9a1df5d5c2d28_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d6d31ef980fd679a1ff9a1df5d5c2d28_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d6d31ef980fd679a1ff9a1df5d5c2d28_JaffaCakes118
-
Size
539KB
-
MD5
d6d31ef980fd679a1ff9a1df5d5c2d28
-
SHA1
12a4197c29fbd70e9cdbc8cbeb48ca3ec1f13cf6
-
SHA256
31a75cc2e8a4b4741dd4aab7d68b2ec1fd8600fbfaab63460c6edd45ab657f68
-
SHA512
21801997fceb006efc4c09dab1bb99188a9582891685f23a25090775d1a4e40f156f3cafbda77596a5743c505b6197bb890356296c0d0ebc0c76d01a87c5e742
-
SSDEEP
12288:lhXFjJpL0EgYSP7hu5kC6Kj1qnbOUOA1Ehspw:7qiSP70xknSUOA1Ehspw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6d31ef980fd679a1ff9a1df5d5c2d28_JaffaCakes118
Files
-
d6d31ef980fd679a1ff9a1df5d5c2d28_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 214KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE