Behavioral task
behavioral1
Sample
effe06e896db05e3620a5ba3a10ba574_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
effe06e896db05e3620a5ba3a10ba574_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
effe06e896db05e3620a5ba3a10ba574_JaffaCakes118
-
Size
68KB
-
MD5
effe06e896db05e3620a5ba3a10ba574
-
SHA1
e46f2931ef359631d938deb0a88ca1c1ee4a5ffa
-
SHA256
1681874f3641b9026cab857304aae04ad10aac516f6b986e52705881b1336c22
-
SHA512
8add518345a45aeceb960f1b067942671e6aa38e3fd855df651ba0fa606c3ac9064a770dc0ec6c524713a0d804c2456ac8bbc10c1abd14801572fa3f0a286880
-
SSDEEP
1536:I6tYVGk/Qow8A0bZI8Bw0J7eb9DG+JXsCkbN/jTR99jhMGSnQA:a4KA0bXDUbZGrvhhC9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource effe06e896db05e3620a5ba3a10ba574_JaffaCakes118
Files
-
effe06e896db05e3620a5ba3a10ba574_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 568KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 265KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE