Behavioral task
behavioral1
Sample
0859ed3c7649dc3460f5216f91538552_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0859ed3c7649dc3460f5216f91538552_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
0859ed3c7649dc3460f5216f91538552_JaffaCakes118
-
Size
18.2MB
-
MD5
0859ed3c7649dc3460f5216f91538552
-
SHA1
11615cd0fb14756ec2f61c6e215bce9f8e6534c5
-
SHA256
4f50446aad5057550b1bbe7b483ccd1f35a95e01947cac3b2c6157fb0a2d2d6b
-
SHA512
59a42f515e31d5e2aed8095aeee329b209c42a4a8ef9e030eb42577d69e9fff86e41f809db0fc907f84f1592a50c54d44218170529a29f1c8301e8a34d5373d2
-
SSDEEP
393216:QHHLIw7tiSm1dI99pAhL8yPqlcrDYmiCb7:CrlcSmDI98d8yPqG3Ymbb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0859ed3c7649dc3460f5216f91538552_JaffaCakes118
Files
-
0859ed3c7649dc3460f5216f91538552_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 18.2MB - Virtual size: 18.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE