Behavioral task
behavioral1
Sample
622c9a2a05cd1f2dd2e56273c932f074_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
622c9a2a05cd1f2dd2e56273c932f074_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
622c9a2a05cd1f2dd2e56273c932f074_JaffaCakes118
-
Size
694KB
-
MD5
622c9a2a05cd1f2dd2e56273c932f074
-
SHA1
a183fce05b6e570a6fd4e6902c92113b8f4c5302
-
SHA256
facbec7327e947094757801d872d75adb12c35f119d07409fd0fcf967f3019f5
-
SHA512
5e1646f499ae497fa9e97cc274e0bec7616c6927d3e2a46c4b4ca5379643e875db4b6de8b4567b4da2dae35f7972451058dc8a25d6f04ab6f7a89446d9e0bbfd
-
SSDEEP
12288:jbK4HgBjbNyRCLW+OTb/m3WatdechfnA1EAMy0RTe0e1w:jXCyRBv1cBhRy0RTedq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 622c9a2a05cd1f2dd2e56273c932f074_JaffaCakes118
Files
-
622c9a2a05cd1f2dd2e56273c932f074_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 393KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE