Behavioral task
behavioral1
Sample
20fec73daf353daabe25d56e4ae61e57_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
20fec73daf353daabe25d56e4ae61e57_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
20fec73daf353daabe25d56e4ae61e57_JaffaCakes118
-
Size
260KB
-
MD5
20fec73daf353daabe25d56e4ae61e57
-
SHA1
987436241514ca9fd6c2753059796cab0306f6ca
-
SHA256
a0c5647b971c46186d0494073e2ec5f2259127cc4feda2c7a9fc987a4c419784
-
SHA512
05ab10b65879804636e34a650338586ed57a153b26e92f827034bc58bbefdc2baf85e15968256152de29521b11b0a45fde43ad466f0806bafd76b7b8ede05fb5
-
SSDEEP
6144:6GSPCzWONw6EDZhiukNy3NNz0YyGEWdr2uvPgvmWsn2K:67KTWeCNNzCqdPvPO0R
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20fec73daf353daabe25d56e4ae61e57_JaffaCakes118
Files
-
20fec73daf353daabe25d56e4ae61e57_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 324KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 344KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE