Behavioral task
behavioral1
Sample
09b15ba8eb49688b62eb6f704ddbb2b9_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
09b15ba8eb49688b62eb6f704ddbb2b9_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
09b15ba8eb49688b62eb6f704ddbb2b9_JaffaCakes118
-
Size
7KB
-
MD5
09b15ba8eb49688b62eb6f704ddbb2b9
-
SHA1
711539ed343595ad164148c681ea1ced97a637eb
-
SHA256
ca6bffbeae4feed529033a6a1d77f570780d08f7ea51b111373a91bc5482f5b0
-
SHA512
75be0b05e9fed11b7dc7dabb2d8a81aa6a0f6b22fa292ed0ac6be2265f543faa1ccc2e67015e6eb12bb7ff2b1b49695dd67c8d055b716341e6e8835df3e630ab
-
SSDEEP
192:6OiAMRQCExbkJyRVX7ap01Wu5Aj6gOtmm:6QMRQ3xbkGB7P1ZAdyj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09b15ba8eb49688b62eb6f704ddbb2b9_JaffaCakes118
Files
-
09b15ba8eb49688b62eb6f704ddbb2b9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nkh Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE