Behavioral task
behavioral1
Sample
cc729b8c1f1d7f050ca51d488f2572e2_JaffaCakes118.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
cc729b8c1f1d7f050ca51d488f2572e2_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
cc729b8c1f1d7f050ca51d488f2572e2_JaffaCakes118
-
Size
224KB
-
MD5
cc729b8c1f1d7f050ca51d488f2572e2
-
SHA1
82b30570a2d787ffa79834f55e97127c2f1f08af
-
SHA256
fbc7ea811a9cc4d78986918a1c07a6c6fc9f4be6e5ea4952ad76fb7b23c752af
-
SHA512
ca09a774d0cc0225aadbba1919411c56fe52f083a62bddab07e891b9231566ea342a8fb13623afafe8141f782485d62f310506f5e07267c2a6033382ea29d5ec
-
SSDEEP
6144:lnOBWg8BRGHbLegPMEGSu7YG/vXYiMWt5CAVJbc15:yp8BRsbWELGo7w1VW15
Malware Config
Signatures
Files
-
cc729b8c1f1d7f050ca51d488f2572e2_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 288KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 205KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 323KB - Virtual size: 323KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 1024B - Virtual size: 560B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ