Behavioral task
behavioral1
Sample
dbac3b107c36f9f4a67981e8a0c64725_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dbac3b107c36f9f4a67981e8a0c64725_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
dbac3b107c36f9f4a67981e8a0c64725_JaffaCakes118
-
Size
469KB
-
MD5
dbac3b107c36f9f4a67981e8a0c64725
-
SHA1
4a1fac6b73fa45c434c401225d95a64b3cc0d47c
-
SHA256
60a917c2511bae93a9c9a4bd7200cc1df57954c2e11ef73adbfe879f9566b8fa
-
SHA512
667cdf60c57d559e842cde71c25c1a5bd470a5f29a73bafb7531806c3f6d93f652de255841bf1dd15895e6e8240e80061cb4213156c00f52882a507d7ebefa78
-
SSDEEP
6144:NV7+rXXlqAOLuiZ9SIbVMbwi3U2e2pKHdevI0P9TTHwOtwsflw/VZstziH:2DlMKc9Juwi3U2e2HB9Tzwo1f4eziH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbac3b107c36f9f4a67981e8a0c64725_JaffaCakes118
Files
-
dbac3b107c36f9f4a67981e8a0c64725_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 196KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE