Behavioral task
behavioral1
Sample
0d138d5edac1717b457dc8cadd4e93c8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0d138d5edac1717b457dc8cadd4e93c8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0d138d5edac1717b457dc8cadd4e93c8_JaffaCakes118
-
Size
250KB
-
MD5
0d138d5edac1717b457dc8cadd4e93c8
-
SHA1
15fb6e73e20a633df3ede87293b77524bbfaa060
-
SHA256
64ae302255f3fe979d332b8a295ea883ad3900d601fad7410ddb826970e2a541
-
SHA512
2de79c2a2e71d5013f73b25743ea1c0fbd4731d5a217a1213b0bdf334d8d78d7ff1d324722a6d1c3655bcbe9b760e4779996b87410dd301603a7668be3b6deff
-
SSDEEP
6144:ehieuJDr5T8b2ufqBLjSB/MS7irtIa6cwoD8ZroSfjGFA:LeKrJJuf86AYcwoaoSbr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d138d5edac1717b457dc8cadd4e93c8_JaffaCakes118
Files
-
0d138d5edac1717b457dc8cadd4e93c8_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 456KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 242KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE