Behavioral task
behavioral1
Sample
000b8a01eb7c546aeceef58547a08a07_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
000b8a01eb7c546aeceef58547a08a07_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
000b8a01eb7c546aeceef58547a08a07_JaffaCakes118
-
Size
88KB
-
MD5
000b8a01eb7c546aeceef58547a08a07
-
SHA1
120ad485406d8bfd0eab6a0f52af18d9f808863c
-
SHA256
b14e956a1ce70c6c1e101082425b04ab13ff22e0084b8f08b6106a245782b259
-
SHA512
c239d95777c8da543ec877c39b6a3b99da6462bdb383a8769b2e583807ef22d9a6faa721f340471f4134972f92dc56635c5a82640a882902f35420e1af3c0b07
-
SSDEEP
1536:Ji0YGgfHJGW/54zWn4fRXKI/Lqt8TdSkBjPaoaVl17XJf3RhSUN/piaQj9:6GSP/6zW4fRXBNTdSujSoADJ5Q2hiaQh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 000b8a01eb7c546aeceef58547a08a07_JaffaCakes118
Files
-
000b8a01eb7c546aeceef58547a08a07_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 324KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 344KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE