Behavioral task
behavioral1
Sample
f553cdd99024789ac1d422f3181534c2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f553cdd99024789ac1d422f3181534c2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f553cdd99024789ac1d422f3181534c2_JaffaCakes118
-
Size
73KB
-
MD5
f553cdd99024789ac1d422f3181534c2
-
SHA1
3580d4569ba5f7c5468e0ff3cd3ad0da91173afb
-
SHA256
8493fb277221304d7f8b637f2b1e72131a70d4a3136757d817ede8da9b6ddb68
-
SHA512
1dd980b5c7c1be996a7527c3473667027777505001155aac3bae9a3625b88c61281995fc2776f9302704826357504e27d791c1ca950a41086d329c5dd2eae0bc
-
SSDEEP
1536:/c0acpslaWKsJLnhGJ0OkfSmVH0xTbcd+QJkyAnouy8t:/vacpsZKkd6NW/50x9foutt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f553cdd99024789ac1d422f3181534c2_JaffaCakes118
Files
-
f553cdd99024789ac1d422f3181534c2_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 196KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE