Behavioral task
behavioral1
Sample
0a50854cac72279713f109417b34b403_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0a50854cac72279713f109417b34b403_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0a50854cac72279713f109417b34b403_JaffaCakes118
-
Size
133KB
-
MD5
0a50854cac72279713f109417b34b403
-
SHA1
a1b29afd109da842ca596bf31d71252a1929da72
-
SHA256
d9f23f1f05b2bb8975c9956b42f875f84d95760cac765127573f5ecf6bd345a9
-
SHA512
7723592407274be98cf85d72bd6e24d79ae12866e9128f26efecb45b0e95cc9ebecd3b72cccbc3ad329ef723f5a987499ecfdbc33df6bad4cc2ebf6bdb886469
-
SSDEEP
3072:6Q+l6aDnZg1fNfJeF7U15HIeJak0Zhx4uyLp:6Q+kqZEMF7gFw/x4Nl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a50854cac72279713f109417b34b403_JaffaCakes118
Files
-
0a50854cac72279713f109417b34b403_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 616KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 306KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE