Behavioral task
behavioral1
Sample
1b568d8c82d45f121fe9658b84477df5_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1b568d8c82d45f121fe9658b84477df5_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
1b568d8c82d45f121fe9658b84477df5_JaffaCakes118
-
Size
367KB
-
MD5
1b568d8c82d45f121fe9658b84477df5
-
SHA1
ed81db2cb47945262a328cb8f93fc3516e485a3b
-
SHA256
ab65dade19cb4cfdf5f3b3c8f919beb3cee83cd16dbb600c58ad3db147d65977
-
SHA512
65a0e4d9d7ed46679f787f934ef15f69076193d28b9669a0e74f6f7dab200c7963e5f6948a394d824e3aad0def07116ca6820a7f12c2718c96aa9fa0d62f3990
-
SSDEEP
6144:QAlGD8TDa7+L1f2pUU3wKV/oOO//+JoCyWAzMPb5NCOa7RoSbJAXjiU4bz:Qch7Zu3wKZqeyWAYdNCOGRoSbJAX+U4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b568d8c82d45f121fe9658b84477df5_JaffaCakes118
Files
-
1b568d8c82d45f121fe9658b84477df5_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 297KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE