Behavioral task
behavioral1
Sample
6115a6e18b2e63b9a547536f948520e0_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6115a6e18b2e63b9a547536f948520e0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6115a6e18b2e63b9a547536f948520e0_JaffaCakes118
-
Size
16KB
-
MD5
6115a6e18b2e63b9a547536f948520e0
-
SHA1
b3b492e62d98f5504e83c012c686c6af7ea70553
-
SHA256
add8238b7becfc0a98fa1b4ea50a6ccd91b46602f3e6265a08c834010c9a3b27
-
SHA512
e688014281e202620b9faa127674acd9d386db30dc7d6a1d680b84cce347f0ea8c975f7c4af9cc98166821d3452a77c326579c62e4512e7335eebd88f8bb0ad3
-
SSDEEP
384:07FnwfpB7PbWf7BDLQ8QFa0R+QflXs7A37ZzrAkZ0oP:CMvWfVDcxfR+MAAL5PP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6115a6e18b2e63b9a547536f948520e0_JaffaCakes118
Files
-
6115a6e18b2e63b9a547536f948520e0_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE