Behavioral task
behavioral1
Sample
59fa72dfcc71ae28bab33241fdaf8d91_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
59fa72dfcc71ae28bab33241fdaf8d91_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
59fa72dfcc71ae28bab33241fdaf8d91_JaffaCakes118
-
Size
6KB
-
MD5
59fa72dfcc71ae28bab33241fdaf8d91
-
SHA1
90508c243963af3afe81a88968f915c98dccedcd
-
SHA256
73d45b008184f5625201c7933290a768151cd16a4db5ff77d23ef6cec2710a00
-
SHA512
c36cd543bcbeb5d9358d0127a161b5f9832b06b5a57f93f00283a62c77d6fa5037754c16cd63db2ee0c683cd58b6a8261c3e58fa53931d4e9fcc016883dc90dd
-
SSDEEP
192:FqY6t1woQuOs+VJMOtfhoFSxxH8b5s2mK9t:FqY6t1woJ4npWoXQswj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59fa72dfcc71ae28bab33241fdaf8d91_JaffaCakes118
Files
-
59fa72dfcc71ae28bab33241fdaf8d91_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE