Behavioral task
behavioral1
Sample
33cb8f6737ef20b25b71012c5477d2b5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
33cb8f6737ef20b25b71012c5477d2b5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
33cb8f6737ef20b25b71012c5477d2b5_JaffaCakes118
-
Size
566KB
-
MD5
33cb8f6737ef20b25b71012c5477d2b5
-
SHA1
66300d9e372d47208be6f304417a939e0b43b2b3
-
SHA256
88d2b40bc6bf64ffab0c5116cf734cf2b9d4fe07d7f3ff9ab592a94a005c9bb0
-
SHA512
ebac47d821c2b0b320551b43cf66e1e3a4e99d456bf2c3fda3c3dbaea0b7de50f453cbf8a495b211cc3cb9802d0920ceab91ed99882646571d94987a32159af0
-
SSDEEP
12288:VvUGNDMRh6cLVLQ3tw0D/v9p5jk1F6YFBzwmEyoARBbzZZPgjk8g1ao:eh6chYus9g3r7zwlyoc9LPgjhzo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33cb8f6737ef20b25b71012c5477d2b5_JaffaCakes118
Files
-
33cb8f6737ef20b25b71012c5477d2b5_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 351KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 428KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE