Behavioral task
behavioral1
Sample
ef1c073775afb0682c37cfb634fb70b4_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ef1c073775afb0682c37cfb634fb70b4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ef1c073775afb0682c37cfb634fb70b4_JaffaCakes118
-
Size
464KB
-
MD5
ef1c073775afb0682c37cfb634fb70b4
-
SHA1
9f016119202de45dec39270494290579d167fa26
-
SHA256
64aed55f0381acb970259b976561320a46b55904a47ff7a4c08f2b91e5399f2d
-
SHA512
1e61e350007568982fe5f647e8a4c975e5030ac8b9ecb3759d79b25e86e5f68c983c5110b79de7d47fd615e0dea78ef79bb9e2fa506a3b8a8e4cc9436a1d3a43
-
SSDEEP
6144:c6J4L5/VacfbUblzrvRT+0RGQHlzWMxM8TYldRkQf5nHmKaXLDWb:k1/VJbyn5T+0R9BM8EldRkmG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef1c073775afb0682c37cfb634fb70b4_JaffaCakes118
Files
-
ef1c073775afb0682c37cfb634fb70b4_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE