Behavioral task
behavioral1
Sample
061973a5cd8d0ba677092f64d2382810_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
061973a5cd8d0ba677092f64d2382810_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
061973a5cd8d0ba677092f64d2382810_JaffaCakes118
-
Size
139KB
-
MD5
061973a5cd8d0ba677092f64d2382810
-
SHA1
3cc380a8a5a80ee46f63bc21157e70df78dc35fd
-
SHA256
7294372838ea2b88ee566de691e6a731bf034670a8003aa71faf350cc7ff732d
-
SHA512
24af6c5467ad26cfb754272e74fb6efc3268ce98470aa889d537e4d93e4c7a9704bef614ec05a2ef1f5d86f4a8997fdb56a9c6b35a98d157373c2e9b411ccfb7
-
SSDEEP
3072:KYeQ+cjKqdf3WsGa4M8p09WqFIWM3Vh/gjPu+t:aQ9jKqdf3WsA0WSI/VL+t
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 061973a5cd8d0ba677092f64d2382810_JaffaCakes118
Files
-
061973a5cd8d0ba677092f64d2382810_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 191KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE