Behavioral task
behavioral1
Sample
259b394325fddb2b409eba884e0101fa_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
259b394325fddb2b409eba884e0101fa_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
259b394325fddb2b409eba884e0101fa_JaffaCakes118
-
Size
539KB
-
MD5
259b394325fddb2b409eba884e0101fa
-
SHA1
83d711a65f22be2b87cfa2340122cf8f073fba36
-
SHA256
2333eee11cf13ec7515f0823fd105f848e450bb8ab9ddfdf8cfc55bcf1149ae5
-
SHA512
c3f19208b5c4deedc125494c2a8d42b24040a90723a1ef643102177f850fe6583a64c258485adc3a1d2dbe6884d6bd26964335ff93abaadcd1f888625fffecc8
-
SSDEEP
6144:EGNV6B0bfMC5/P5k0OZK1xItgDHHeV1dj29e6YlFFiJOcETDLsuqomxbGS0UY0JX:EGNG0jMC5/21Zr8+FF1rsuW3X
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 259b394325fddb2b409eba884e0101fa_JaffaCakes118
Files
-
259b394325fddb2b409eba884e0101fa_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 222KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE