Behavioral task
behavioral1
Sample
55fb289a93910a1c11f21c40542d719c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
55fb289a93910a1c11f21c40542d719c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
55fb289a93910a1c11f21c40542d719c_JaffaCakes118
-
Size
94KB
-
MD5
55fb289a93910a1c11f21c40542d719c
-
SHA1
ad5f2e0f88a61f7bdd202698c29e76b70cc14e6e
-
SHA256
770f7a521258aa4cc24afc0f3c6d7f2d2d4f8b598cdce982bbea7d28f3f1f258
-
SHA512
fd8035643c5c84173d813b67a6eba6252e615c419250a7381404b304a0c8f6abf4b0071ac0513e57ebba74d3f106d48d72ee636152c4ff2574e48fb8b101f445
-
SSDEEP
1536:PvylhzDs9yxQV/RUSAMD9P35dvGm/3ac69/Mc8OgNLCR2f5mWz6KW8nynMv:ilFDEKo/SSx7T/3IhMc8OgNI2f5z6KXH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55fb289a93910a1c11f21c40542d719c_JaffaCakes118
Files
-
55fb289a93910a1c11f21c40542d719c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 191KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE