Behavioral task
behavioral1
Sample
0a5f8cc38b269ddba65ee3cff751b322_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0a5f8cc38b269ddba65ee3cff751b322_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0a5f8cc38b269ddba65ee3cff751b322_JaffaCakes118
-
Size
44KB
-
MD5
0a5f8cc38b269ddba65ee3cff751b322
-
SHA1
6930d2e65e685ef383cfc5906fa1113508844312
-
SHA256
72c1aae4c6f29d9850032e94783dc25630f1e37ef84ed6bdc04816a6b6a83e3d
-
SHA512
e94f78b2699f6531dd0ca5d1c551f5ab0ab5eaa70b9733fe0daf6c0ae548cceb5ee44b1f6db025e5125eaec89fbbf4730771a412c5531cb595b8d6cdfbf46c5c
-
SSDEEP
768:46ECO3PIBjb/+ttzR+BLvD7fc6KdsZ1dg+53LU1ZazazeQ56KXugNUcmpLE/nbcS:4vAlmttzeDfcxdw/UZQa/hXug7/nouy8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a5f8cc38b269ddba65ee3cff751b322_JaffaCakes118
Files
-
0a5f8cc38b269ddba65ee3cff751b322_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE