Behavioral task
behavioral1
Sample
06671002788294530aac95b3b9f9a320_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
06671002788294530aac95b3b9f9a320_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
06671002788294530aac95b3b9f9a320_JaffaCakes118
-
Size
96KB
-
MD5
06671002788294530aac95b3b9f9a320
-
SHA1
704afc1825c3acc8bcbc3860b6b3f4e45df5eeaa
-
SHA256
2b8cd1046b6f49579572227a29f9aaa08f3852464172d3e51df4ec2545455444
-
SHA512
4d27e69eaeeb9472e659f6ce98087215eed2b5182d6344c5bf97523ae706214cd40b3ab71715e65cd3458d8692f2e6d2689fc70e9bf58f92cc5ac10e337b430b
-
SSDEEP
1536:sCwI+8RQ2/6zPc/IJckCETvHdg4mvUtAXqr70qDiDNptg94UrYPQCmpygW3scgps:z+8RQ2IPcVkCEbdg4/tAXqr7NGBptg9o
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06671002788294530aac95b3b9f9a320_JaffaCakes118
Files
-
06671002788294530aac95b3b9f9a320_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 812KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 814KB - Virtual size: 816KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE