Behavioral task
behavioral1
Sample
4f50aa6452d6e1f5acf822ef32e90b06_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4f50aa6452d6e1f5acf822ef32e90b06_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4f50aa6452d6e1f5acf822ef32e90b06_JaffaCakes118
-
Size
462KB
-
MD5
4f50aa6452d6e1f5acf822ef32e90b06
-
SHA1
569b7724aba778c029082129bd9262f119fc929a
-
SHA256
e1fc8dbace4ff7a9d0fa5e4dafe6d76315a8445a549e2b7157e523b9304a03b8
-
SHA512
c2fd9be7cc99964a789313719286902985cb5489f3ca8fb7edad9e924de149bb5aa7ca5437208eff1d8e799af9196cacde39e4520b9b6ba700603dd6970d46d8
-
SSDEEP
6144:1XuJVxgTOZMgbQgyYXsoayvifR9X+dHXF7kgRx9CoAZ9z5ykM:1XkR2AmONifR9X+bvx9CBDzg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f50aa6452d6e1f5acf822ef32e90b06_JaffaCakes118
Files
-
4f50aa6452d6e1f5acf822ef32e90b06_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 189KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE