Behavioral task
behavioral1
Sample
de3dbf747a0c2411b1ad94926fbfa139_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de3dbf747a0c2411b1ad94926fbfa139_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de3dbf747a0c2411b1ad94926fbfa139_JaffaCakes118
-
Size
985KB
-
MD5
de3dbf747a0c2411b1ad94926fbfa139
-
SHA1
350d2733a51b38b3299806d55907f97960d26245
-
SHA256
e42e35de720849fef362dcf16260e15f2be9b6cc63a2deb808794ede176bf2b0
-
SHA512
3f83a106d0c9cd918da4c45c5072cbeb401d7d3a45d84e57442a9a806c38b29d898835d5ac18b8abd9b91619d4c1b485c7b23d95f953ffb5da9b716c9ac340fc
-
SSDEEP
12288:CnCQIlIW28wo0+9fh8yVDHp8ZTgawkM1EAGcFWQeshhz6M6yhkoLhadvOIfiJiuZ:CI65+HzFGMawkKJGkeIhWikk+OIc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de3dbf747a0c2411b1ad94926fbfa139_JaffaCakes118
Files
-
de3dbf747a0c2411b1ad94926fbfa139_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 856KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 983KB - Virtual size: 984KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE