Behavioral task
behavioral1
Sample
fe5e2adac8bbf41683af1b3c027ff8d4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fe5e2adac8bbf41683af1b3c027ff8d4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fe5e2adac8bbf41683af1b3c027ff8d4_JaffaCakes118
-
Size
464KB
-
MD5
fe5e2adac8bbf41683af1b3c027ff8d4
-
SHA1
022c00aeeef17432cc1a7d93cf08f53cc8df4fd3
-
SHA256
c1213481431dd268734f568abca3e67c6166e87b23a41a4e677ae8ed912b1e2c
-
SHA512
03319c3e6208af3aad6cff611a34b7831c0691616b9c3fbd2c61086847504cace2696060d3a1fa00ce83ccfd60e39399c2c30b39512d5fef76ad5de95f5c794f
-
SSDEEP
6144:/YULkv2QZczjyBdj9h4mBHsIk8e0okHo7IMYBa+9i7we66:CvnZU+1rQ0okHpMYli7weh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe5e2adac8bbf41683af1b3c027ff8d4_JaffaCakes118
Files
-
fe5e2adac8bbf41683af1b3c027ff8d4_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 183KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE