Behavioral task
behavioral1
Sample
f124b989dbdf11f9e7abc3515d88430d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f124b989dbdf11f9e7abc3515d88430d_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f124b989dbdf11f9e7abc3515d88430d_JaffaCakes118
-
Size
29KB
-
MD5
f124b989dbdf11f9e7abc3515d88430d
-
SHA1
6839118e8976a9066f4ea82500d55f90ecadfcdf
-
SHA256
2c6d756b01bba6ebbd87ac4ff712771f7a6252374ba4f80acab42f92ee33f7eb
-
SHA512
9b4b2c997c9b4c7677089a59e486779219fa42c460a2334edac3e084f4f485546f4e0d6d345ebb120c4f7c0e01a4ce52264e4c4da37683e835187fb28fb277f4
-
SSDEEP
768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFPH:SKcR4mjD9r823Ff
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f124b989dbdf11f9e7abc3515d88430d_JaffaCakes118
Files
-
f124b989dbdf11f9e7abc3515d88430d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE