Behavioral task
behavioral1
Sample
8e5931f07d4d9579e56ebca330ead287_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
8e5931f07d4d9579e56ebca330ead287_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
8e5931f07d4d9579e56ebca330ead287_JaffaCakes118
-
Size
883KB
-
MD5
8e5931f07d4d9579e56ebca330ead287
-
SHA1
4a8f9ec0fe5f77b1e614ef19d4506c758d54ecf9
-
SHA256
61c9bb644e3538af47a009f98cf7f76c3c139ab0014e122b4946f661f3e2e7ca
-
SHA512
129594a293fc77d06bf7014330cd9862917c2f039297a3f311473a582723e5e28ca2362804db0c173f5df9066c703b90f5024cb8f6607d4b5e99639a712feaa8
-
SSDEEP
24576:hQCcYFik7DC1ILaaV/4r6dPHMgR3dHeBsLh3:vi2OmaaV/4ujR3Os
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e5931f07d4d9579e56ebca330ead287_JaffaCakes118
Files
-
8e5931f07d4d9579e56ebca330ead287_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 879KB - Virtual size: 880KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE