Behavioral task
behavioral1
Sample
df1bd2161291823302e70b100e585512_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
df1bd2161291823302e70b100e585512_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
df1bd2161291823302e70b100e585512_JaffaCakes118
-
Size
156KB
-
MD5
df1bd2161291823302e70b100e585512
-
SHA1
9ea3bf2146b94653eb18449f5d35643deb5c5709
-
SHA256
912d542e2584d8f88ab019ba88f7aa7530d7ce2d1fe8d115c491a1f5a19be67e
-
SHA512
1baadc86ed5b2ad152b0a2431facbfde5c53c575c137dc722f18af2ef2ac4d14be5fef6b95a004fd0955135c03765127cc72b9ebabfaa98db47ceab115303099
-
SSDEEP
3072:Ph6nNO4WbZ0VPsIwB6LjKd5eY/gCku3vAYWt79LYgdJzF0leA+8xmm+UqhOy6:PknN4CVUIm6uk06ZLYgvBA+8xmr6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df1bd2161291823302e70b100e585512_JaffaCakes118
Files
-
df1bd2161291823302e70b100e585512_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 388KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE