Behavioral task
behavioral1
Sample
df584e94058cc9cda1f12b82a4c393d7_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
df584e94058cc9cda1f12b82a4c393d7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
df584e94058cc9cda1f12b82a4c393d7_JaffaCakes118
-
Size
542KB
-
MD5
df584e94058cc9cda1f12b82a4c393d7
-
SHA1
ee19a775787355fe432096f3d90fbc0fbc8ff168
-
SHA256
1865366512d973a85ad205356d72d0b01d9c7c40b24259b7432b81ead376943f
-
SHA512
e623e493b954265d803e550846b90d0ccb76bfe9efde593b8033ffff8bd12e4b126248aabb61d6bc3f6debb55c3ddacd704351556f2cc8527cabf54449684ec9
-
SSDEEP
6144:v+93B2MgZV67j7wOqlscKsscHFCWVoxF8ddHZjixx31s24Sq3nSK/ktsmrT/:v+9gMMV67jngBaFsZjqFs2m3QtPT/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df584e94058cc9cda1f12b82a4c393d7_JaffaCakes118
Files
-
df584e94058cc9cda1f12b82a4c393d7_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 221KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE