Behavioral task
behavioral1
Sample
368b3e1cb96d12c9e7fb1e6d967cc668_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
368b3e1cb96d12c9e7fb1e6d967cc668_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
368b3e1cb96d12c9e7fb1e6d967cc668_JaffaCakes118
-
Size
475KB
-
MD5
368b3e1cb96d12c9e7fb1e6d967cc668
-
SHA1
d7154c752bd461f948823fd93016f5dcacd942ca
-
SHA256
bd304e7794368d9d1477ae462365f36575d9efdf251b7633062e34a7b3c8b71c
-
SHA512
24dac49f2bab88e9a89f7476b49411ce444398134127a8bab560cd7f257379b0f9f828213627477349ef8bf0380842f3e029b9b18bc4f3c24552761d84e95a8a
-
SSDEEP
6144:Vx2zM4qHacdIiKL0Jow78+HpQ6fIqEEviEI21Muxn3EH5QXMlV3/W/XcqcS:Vx2zMzmiTowfIq3viEFRnIGXIlu/XJf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 368b3e1cb96d12c9e7fb1e6d967cc668_JaffaCakes118
Files
-
368b3e1cb96d12c9e7fb1e6d967cc668_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 186KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE