Behavioral task
behavioral1
Sample
0d69f7923f363f08c33ed45b9ba5dbcb_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0d69f7923f363f08c33ed45b9ba5dbcb_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0d69f7923f363f08c33ed45b9ba5dbcb_JaffaCakes118
-
Size
279KB
-
MD5
0d69f7923f363f08c33ed45b9ba5dbcb
-
SHA1
773dfeee2e4080970f439c4b5db0e78464ef4cc5
-
SHA256
40d4cabee7ca4d2f279350e5cf67a88f0fb0b51ea9ea3d40a212a2f030c0eb96
-
SHA512
937b933a05be7a1592e9098adae559b054fbc9cf13b33d628c45641534bc0beb875d50689c0ca45722d64d8ce5244137310aea531fe5f5dd6ef7e97186df7ad8
-
SSDEEP
6144:BlZ/zUMu4pDSxsCMRzf7x3SfS1JAzXBtL76ltCsV:BHLUMuiv9RgfSjAzRtyf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d69f7923f363f08c33ed45b9ba5dbcb_JaffaCakes118
Files
-
0d69f7923f363f08c33ed45b9ba5dbcb_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 444KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 253KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE