Behavioral task
behavioral1
Sample
09ae0537fdc9c42dfce6d8bb5fa0eefd_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
09ae0537fdc9c42dfce6d8bb5fa0eefd_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
09ae0537fdc9c42dfce6d8bb5fa0eefd_JaffaCakes118
-
Size
560KB
-
MD5
09ae0537fdc9c42dfce6d8bb5fa0eefd
-
SHA1
69b96d5b37733272a56b9fb26b40bc79e304e3e7
-
SHA256
58eabd5c14c95d9a61435f500cc0a9079a7c5c3e6adc54546a061a8d53c521b0
-
SHA512
08fb37538caba469b812453adc539e98db382376c65535e470bf9fe7343d22a469837cc97d5580ece81cca8efe79834bc105b12c5235488be76e4d82711c667b
-
SSDEEP
12288:iKLkeRArQhFwm318zK6I3cCy685jBE2ok75JwplGD5toS:CQhF13mzK6Isj6qPok7ry
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09ae0537fdc9c42dfce6d8bb5fa0eefd_JaffaCakes118
Files
-
09ae0537fdc9c42dfce6d8bb5fa0eefd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 549KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE