Behavioral task
behavioral1
Sample
f615a78625a064ec459a9652990f31db_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f615a78625a064ec459a9652990f31db_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f615a78625a064ec459a9652990f31db_JaffaCakes118
-
Size
29KB
-
MD5
f615a78625a064ec459a9652990f31db
-
SHA1
a3d4e314b0887f47e81654a000df1dc03c88201f
-
SHA256
5721945809ec427664071dad462660bab3b7640005e251e34cf829fc774140da
-
SHA512
dce5c0e0af34866e06e2e202e7b25cb59d2c2d33e46f44017dceadb776221a092f38c85cb15ef0b07014269086f33439bea47f5ae38247aa98961631d9540273
-
SSDEEP
768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFcL:SKcR4mjD9r823FcL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f615a78625a064ec459a9652990f31db_JaffaCakes118
Files
-
f615a78625a064ec459a9652990f31db_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE