Behavioral task
behavioral1
Sample
09e25d899e7b583f6fb52d2f85083e9c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
09e25d899e7b583f6fb52d2f85083e9c_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
09e25d899e7b583f6fb52d2f85083e9c_JaffaCakes118
-
Size
868KB
-
MD5
09e25d899e7b583f6fb52d2f85083e9c
-
SHA1
ee6187579c2791e6dd83bbe75ea9458689d2f261
-
SHA256
b5d84dc94b92b4d1babe8735c4c50c3389dafa1cefd49819f587d39163c61567
-
SHA512
05aa010eaca0389d170c137b6a48268446c597bac202719e8d821946cc9d36d475b386a29e5407f03eea176e9d67e0cb89c37cbe5f8426cee9308a00d9c936ab
-
SSDEEP
12288:Hhub2/q0bBnVaczLhb9yqFHg2rG+1e7NcHPGzU+t35dFAfmu/BihP7nxH5GYKoSe:Hwbgq0H/z9bxFHFCi6aOd5dKmuZihDB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09e25d899e7b583f6fb52d2f85083e9c_JaffaCakes118
Files
-
09e25d899e7b583f6fb52d2f85083e9c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 849KB - Virtual size: 852KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE