Behavioral task
behavioral1
Sample
0f9431b6d3a63b69bcb9213d20ba2ef4_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0f9431b6d3a63b69bcb9213d20ba2ef4_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0f9431b6d3a63b69bcb9213d20ba2ef4_JaffaCakes118
-
Size
7.9MB
-
MD5
0f9431b6d3a63b69bcb9213d20ba2ef4
-
SHA1
61643608bf0671129e88ffbb1e6766b02603bc16
-
SHA256
11f3842511cce8e523eee3cb9f1546f025c3241a53e5614922392c0afe376ad9
-
SHA512
07bd959452b4fb6538019e4e9abe2d82bb2f44e722a498d095e9c16187df4fc5ac6585dcdb20741803a2bbbe7d34a18a3c49edc393bcc42edf141804bd93ce05
-
SSDEEP
196608:SFqL6XkJqdOx1F3tDGh5IKYdz5Yk+2xDZKpNC2AyHy02OUt:SFFXdOxb3g5IBdz5YHODJ2SZB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f9431b6d3a63b69bcb9213d20ba2ef4_JaffaCakes118
Files
-
0f9431b6d3a63b69bcb9213d20ba2ef4_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 428KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 664KB - Virtual size: 668KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE