Behavioral task
behavioral1
Sample
0ba4402d85e8ce5a7616453338c1bbb6_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0ba4402d85e8ce5a7616453338c1bbb6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0ba4402d85e8ce5a7616453338c1bbb6_JaffaCakes118
-
Size
347KB
-
MD5
0ba4402d85e8ce5a7616453338c1bbb6
-
SHA1
6efbe2d463e2ac14eab7618dde903b788b1b90ac
-
SHA256
956052ee7c107b9639a33a59e4efda95bb4c66ee4b36b87192eabd29b52c0723
-
SHA512
e802460142bbccccc985bf30ea0c1a888871d630209406879ed6c5c957cd177f4a626f4a87b135f8b30539716e365514b6a3340bd1b39bfd37d252ea4cefb2a1
-
SSDEEP
6144:/TEHv3+1Y1Gs8DBxBsqzdMqWDaay3lFpUxwlobGQETrSi2180a8XmWj9N2dBOX:/T6+CwXBx86pU4Trm180hXmINY8X
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ba4402d85e8ce5a7616453338c1bbb6_JaffaCakes118
Files
-
0ba4402d85e8ce5a7616453338c1bbb6_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE