Behavioral task
behavioral1
Sample
1ff4bc49f5b04cb1e8b55666b0e84b1a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
1ff4bc49f5b04cb1e8b55666b0e84b1a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
1ff4bc49f5b04cb1e8b55666b0e84b1a_JaffaCakes118
-
Size
2.3MB
-
MD5
1ff4bc49f5b04cb1e8b55666b0e84b1a
-
SHA1
5bb98a4c69ea160250a67107cb12ce8bed84fd99
-
SHA256
9e6938e3e4f00a49851275cdc451fabf7d56049ac62322c0919997b4e006cf1a
-
SHA512
513e6e150c6e878c19cc03c16cfebe1ad848cda6801ea14e53e1e0af96e331b4a2c1bbc617460dc27bebc00f64ccc27617f91befa38d18e09ba2af4ea1c31bb2
-
SSDEEP
24576:rYPcv5AkZNQ1cxHwMn208QkH5tAN9D7mk7IbffdhX6IYf8WI7YBfkaHzflTx/gvT:EPoQp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ff4bc49f5b04cb1e8b55666b0e84b1a_JaffaCakes118
Files
-
1ff4bc49f5b04cb1e8b55666b0e84b1a_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 460KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 239KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE