Behavioral task
behavioral1
Sample
9fa7337097dbed06862cda685c20f891_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9fa7337097dbed06862cda685c20f891_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
9fa7337097dbed06862cda685c20f891_JaffaCakes118
-
Size
220KB
-
MD5
9fa7337097dbed06862cda685c20f891
-
SHA1
9ce56f8fce38269cdf938843cde5a9a9e91f2f76
-
SHA256
8dc1edf0bb68900fcc9f43e1e93c2c30839eec5da70b0aba37228f444c9e4e81
-
SHA512
f45d503574799b548010b43c76480e7d5e1236cbe244b479e95a375c3e642d35fbdfbe27e8a24d60b306812c55b4d7da3213ca84cc32092fac8c9903ec3ea2a2
-
SSDEEP
6144:8nUVY1KxhE/5CPEWwPDvz/IG2TdkKSaoeoS:8UVYcYCTOvLMxkKdoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9fa7337097dbed06862cda685c20f891_JaffaCakes118
Files
-
9fa7337097dbed06862cda685c20f891_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 218KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE