Behavioral task
behavioral1
Sample
09b114c2cd22128f13e6f8857e9ebb02_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
09b114c2cd22128f13e6f8857e9ebb02_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
09b114c2cd22128f13e6f8857e9ebb02_JaffaCakes118
-
Size
80KB
-
MD5
09b114c2cd22128f13e6f8857e9ebb02
-
SHA1
f26780131bf0675cdcd194ff46dbcca9a8619233
-
SHA256
94db0331bd626a2ee631b95c8bd1587ddf104815215afe097207a3dd56eac4db
-
SHA512
823eee0d07b65c0496127ee03cdf0a8d2d68131bd210986731495fa34b60e085f876ec784d32dd2aa973032cc6f5089b8a24561b089ff99bd9a1cbdddf343227
-
SSDEEP
1536:KZlnDdTrhNzpb0+q5WRcnANfIG8Hg1ukC3hCS796c4egwpC9a5ShiebjM8Y:K3nPJpo+QWynAIHg1DCR96BcpKa5iiSY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09b114c2cd22128f13e6f8857e9ebb02_JaffaCakes118
Files
-
09b114c2cd22128f13e6f8857e9ebb02_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 996KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 515KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE