Behavioral task
behavioral1
Sample
ed2d1f7f3e4a265e3062733e1a6cd3d6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ed2d1f7f3e4a265e3062733e1a6cd3d6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ed2d1f7f3e4a265e3062733e1a6cd3d6_JaffaCakes118
-
Size
94KB
-
MD5
ed2d1f7f3e4a265e3062733e1a6cd3d6
-
SHA1
3475082b9013b8c1658fff2f35727df0c748f9bc
-
SHA256
192481a48ae9bf6becd43857a0dc9bbf1a7262c5d092c0ed62847d182fafcefc
-
SHA512
3c6cc2166f5bb007d12aaa79ae76662aa2a7e0f838d1246a4fe6c80a3005c70a95207f94eb2f53870edc3b5ecb17dbddab5f52f066fabc346573695e13463b18
-
SSDEEP
1536:rWWWt9jj4Qs8iBHPKWQvEHo0t1rYupnADnx:QiBiWQvEHo0nMupAV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed2d1f7f3e4a265e3062733e1a6cd3d6_JaffaCakes118
Files
-
ed2d1f7f3e4a265e3062733e1a6cd3d6_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE