Behavioral task
behavioral1
Sample
d9ba8436ffda18c2ce80a2715c78f31c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d9ba8436ffda18c2ce80a2715c78f31c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d9ba8436ffda18c2ce80a2715c78f31c_JaffaCakes118
-
Size
487KB
-
MD5
d9ba8436ffda18c2ce80a2715c78f31c
-
SHA1
53736b3e9ba3d05c084d9161ce5598bf381b1a2e
-
SHA256
e4324b2ec1de9264a5234c1b51cece8a304f06a22ea6428bce37d8193bc88af4
-
SHA512
23c15829b265bdf621c3af14a2d4ab14baf576a083a70cc256b0871692ceaa1a8984f5211a7cf1b6158e7916759b9d4370e8b7b135af146ea998a31784b134b1
-
SSDEEP
6144:NfLuugOvDrmqoZAWnTSntiCeZHsE1zpdKgMnzEnNk/nWF0c:NfL3gOvDrmq6AWTStiu4dKgMQnNyWFV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9ba8436ffda18c2ce80a2715c78f31c_JaffaCakes118
Files
-
d9ba8436ffda18c2ce80a2715c78f31c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 171KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE