Behavioral task
behavioral1
Sample
dfd08c4965ee4483be754025a702c6e5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dfd08c4965ee4483be754025a702c6e5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dfd08c4965ee4483be754025a702c6e5_JaffaCakes118
-
Size
539KB
-
MD5
dfd08c4965ee4483be754025a702c6e5
-
SHA1
174f20ca9799c075acb7e75871765ba215550728
-
SHA256
848b6e041e974c3820ab3d08533818868bc68deec4c9259aea91a568e58a137a
-
SHA512
d172a0ba272bd8cb921667aea287af6462a1c1c4fbea4fafacb657d10fc714881b4fdee97ca43e526e2b8506b259772df1b9d37f2496272432671f48a5b82080
-
SSDEEP
12288:DdrajxZ5awl7DW/HgoWHBXhZLqh0nUHtCP2:Da7DWIXGhCUH7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfd08c4965ee4483be754025a702c6e5_JaffaCakes118
Files
-
dfd08c4965ee4483be754025a702c6e5_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 215KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE