Behavioral task
behavioral1
Sample
0a9557bd6f0207662f389e1c3e656c29_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0a9557bd6f0207662f389e1c3e656c29_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0a9557bd6f0207662f389e1c3e656c29_JaffaCakes118
-
Size
469KB
-
MD5
0a9557bd6f0207662f389e1c3e656c29
-
SHA1
6023a772e34a6e772d15e1bb8845a020a1627e69
-
SHA256
e138dbe17bc02700dce0555239ed7cfa082fef49f851f0cc0e7c634119e26680
-
SHA512
e30f095da5ac8f070bf1b4820a94987a2be8178bd8e55dbae3068e5c4de6a00b79f320829daa9256f5eb1d6e6df0733a45a7a95306b83506f36b09c7311546f3
-
SSDEEP
6144:dHTP96Pms6GibtDH5rrxl2yonHRUtA2gb9QA04aU+eOW4urwdT/Ea:N96OdXlZrxl2yo2Gb9QN0+eO7uCQa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a9557bd6f0207662f389e1c3e656c29_JaffaCakes118
Files
-
0a9557bd6f0207662f389e1c3e656c29_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 196KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE