Behavioral task
behavioral1
Sample
07532de44b3df4504e0f4830f684238e_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
07532de44b3df4504e0f4830f684238e_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
07532de44b3df4504e0f4830f684238e_JaffaCakes118
-
Size
244KB
-
MD5
07532de44b3df4504e0f4830f684238e
-
SHA1
86100450fe299fb9e4c3c587db41a29418fd0e85
-
SHA256
47522d000f0567bd7d48621f1c63d1e21b5341ebc3ed318f10c6c8bd5a0a3b93
-
SHA512
b4f54c0c4ac672f5d5d7e464d98dc93b898ffcf24912779886905137a27bb890d741a634f6faba3228b46999283099613de8d106ec15752d45a212f15b5da9d2
-
SSDEEP
6144:NuACGu1nIhRCt9I9RR0a9P5PYEmPVZjk2ULgpvG6JHExZ:NRZu6RC/QRZhPYEm9xkH+lkH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07532de44b3df4504e0f4830f684238e_JaffaCakes118
Files
-
07532de44b3df4504e0f4830f684238e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 988KB - Virtual size: 992KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE