Behavioral task
behavioral1
Sample
07037fc00623228b48c3c02d799e3289_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
07037fc00623228b48c3c02d799e3289_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
07037fc00623228b48c3c02d799e3289_JaffaCakes118
-
Size
99KB
-
MD5
07037fc00623228b48c3c02d799e3289
-
SHA1
14c4ade8ea6a8964b60aa08e6018abddbfb478cc
-
SHA256
2d01d0eb5a947fbce200206be3f2d4119dd0bd4493f6a147ca39491b0227b7b7
-
SHA512
1964729a08ced4258d43b48d7af09fc15b79073d4801835f252464a138a461e6e66119d9a121b6791191865ba07125d5625d9e95963c1310e82aa7823a96c290
-
SSDEEP
1536:fxA2uE6Rp5tLQvKJbxcycmH92reXgB8420ii:7n8lL7R8reXg24Tii
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07037fc00623228b48c3c02d799e3289_JaffaCakes118
Files
-
07037fc00623228b48c3c02d799e3289_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE