Behavioral task
behavioral1
Sample
18bef396ab8a409128a68f6159eba134_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
18bef396ab8a409128a68f6159eba134_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
18bef396ab8a409128a68f6159eba134_JaffaCakes118
-
Size
478KB
-
MD5
18bef396ab8a409128a68f6159eba134
-
SHA1
3c75fd447e8574f06aa02d27e2702a9a4dbea96a
-
SHA256
06aba36cf51c0c38dea8f0deb7bd0a2e144ff949ecc35621c0e4a4453bb9e1e7
-
SHA512
6c6dbeec1b771d211b3c12352a3ba0de83aef466f134a6fa81976f0123f539744a9048007057ebdb8ff8962a45f2f759066c992f71a37b778a3efc243bf17922
-
SSDEEP
12288:uONFwkE933JmPsqS5FbM+zFp3seUpjMOYoS:uOA5cyvx9GH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18bef396ab8a409128a68f6159eba134_JaffaCakes118
Files
-
18bef396ab8a409128a68f6159eba134_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 340KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 469KB - Virtual size: 472KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE