Behavioral task
behavioral1
Sample
63029abb34705b24094a4cd0723515d4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
63029abb34705b24094a4cd0723515d4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
63029abb34705b24094a4cd0723515d4_JaffaCakes118
-
Size
117KB
-
MD5
63029abb34705b24094a4cd0723515d4
-
SHA1
2219e1a07e942ea8a7cf50413703f8c073aff7bc
-
SHA256
98742647dbdf4d6a9e0451b3b3d5f773907aba13e15385e0c2a92a7bacd86a72
-
SHA512
4a7ae8e2415b761bf25d109041bfb72544078bab1fac829e95872c6716884e1838a55fb8f4356b4c9db38d1dbf65c96022c40539257ae66afc7abedb1d855ded
-
SSDEEP
1536:ocNjQlsWjcd+xzl7SM+Gn824eo6KcR4mjD9r823Fp:bjr87S7Gnzbo6KcWmjRrz3D
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63029abb34705b24094a4cd0723515d4_JaffaCakes118
Files
-
63029abb34705b24094a4cd0723515d4_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE