Behavioral task
behavioral1
Sample
099f5d5d15275fa2c48386f28f5fe7dc_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
099f5d5d15275fa2c48386f28f5fe7dc_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
099f5d5d15275fa2c48386f28f5fe7dc_JaffaCakes118
-
Size
5KB
-
MD5
099f5d5d15275fa2c48386f28f5fe7dc
-
SHA1
0ff51f38b1a47a45feb001325f68a4624108b9b9
-
SHA256
c9930e4fc4f57383e9b5e514bf5d00b2d63e00d2d948e6c66a5418ffd4033d5e
-
SHA512
38095cf366f40f6d06c039fe3d44ed068eac7cd93710bc387022dd55db1c644313c1c7d5f6f79b39f9f066ee1f85fc2621b3764f183b8339dfd38a1dfc2f9f6d
-
SSDEEP
96:eJUCFFY/WZvMmVqI4gmE/7C+2SytTpn9B1/BhcGs8q+Y4:em+YuZPt/7etTJ9hh08TY4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 099f5d5d15275fa2c48386f28f5fe7dc_JaffaCakes118
Files
-
099f5d5d15275fa2c48386f28f5fe7dc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE