Behavioral task
behavioral1
Sample
092d5b3fc7e97102044b99b9dd01d332_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
092d5b3fc7e97102044b99b9dd01d332_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
092d5b3fc7e97102044b99b9dd01d332_JaffaCakes118
-
Size
463KB
-
MD5
092d5b3fc7e97102044b99b9dd01d332
-
SHA1
f2b95cd4865634d6f207cf53a4209a205861f613
-
SHA256
d5160e1eff8c5b4972963327058a92b3fac33bfdfdb1e4a114ce1e0b49f64f98
-
SHA512
63241c979017434bdb3f0eece777e72dee562c35b0742c3c31fd0edb8648ee38f15aeb3bafc4f524c58561812f8a555c874253e1f52854d4e5e10646c7c7f15f
-
SSDEEP
6144:LB8sOtOagYKKKgfcufObeZ7jHrMSV7Hrz45FHjg9mBKlsybC/1kP:LB8IagYnKgfHQKYSVTYjg9mBIsybL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 092d5b3fc7e97102044b99b9dd01d332_JaffaCakes118
Files
-
092d5b3fc7e97102044b99b9dd01d332_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 191KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE