Behavioral task
behavioral1
Sample
14cc3e61ce0b7b0c8d66e92e33ac9353_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
14cc3e61ce0b7b0c8d66e92e33ac9353_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
14cc3e61ce0b7b0c8d66e92e33ac9353_JaffaCakes118
-
Size
11KB
-
MD5
14cc3e61ce0b7b0c8d66e92e33ac9353
-
SHA1
672757865bd3685fa50d74ce06edfc02c37a4508
-
SHA256
7bb92d100b3065185917d5e7adc4d4b33fb3ecc8db1c99e59e67689177c2041c
-
SHA512
35ba72ac8e22e9f8d3f78933ed41079f0b98986446cad0bfd00bc7e9d0c3548824e8898118d9d0ece857e77cccecf7da0b53414d2e6ef66014a6c5c2a963df1c
-
SSDEEP
192:gn6wbXkb3BMce+ws9hKk4QjYe4pAv2HJza44ipVR7yxkQdh7:gnbj4MceNcsSAH9nLgR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14cc3e61ce0b7b0c8d66e92e33ac9353_JaffaCakes118
Files
-
14cc3e61ce0b7b0c8d66e92e33ac9353_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE