Behavioral task
behavioral1
Sample
43b21260ff15d0437c0533fa9548a99a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
43b21260ff15d0437c0533fa9548a99a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
43b21260ff15d0437c0533fa9548a99a_JaffaCakes118
-
Size
368KB
-
MD5
43b21260ff15d0437c0533fa9548a99a
-
SHA1
b50ba4f79ed3b6e20836cbf1344be247d8b4d27b
-
SHA256
b8896d62b0785919afa9abe5a14e638923af8f4b32fb9841f80f4a5154b1b44d
-
SHA512
f815382d5ddba9fc19a25596e5add51d2c736efdd556496478bf5e5fad3f562c6720352797cd269df4f1e7830d7af9e2a10b3dbf213803ddabc2c38660160726
-
SSDEEP
6144:aPUrKuc8ssVpIv4t3+h9omAjxFiOdZmzPSfKz7y2TqKyzdFi4M8We18a:a8rKucRSpKNhLAVFzoSyz7YMgWe1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43b21260ff15d0437c0533fa9548a99a_JaffaCakes118
Files
-
43b21260ff15d0437c0533fa9548a99a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 364KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.EUPX1 Size: 139KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE