Behavioral task
behavioral1
Sample
640307ab09deeeac0ccb2b42c4508e0c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
640307ab09deeeac0ccb2b42c4508e0c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
640307ab09deeeac0ccb2b42c4508e0c_JaffaCakes118
-
Size
128KB
-
MD5
640307ab09deeeac0ccb2b42c4508e0c
-
SHA1
90afe32a72fe3fb46a51851b34c29ebe9834d194
-
SHA256
8e8125e72bf2dc6b65d6f972a81c3e8893a681d960153dda2e9fd3e2db9ddbf9
-
SHA512
eff9210f9abf790cd62b3754b0a87e549871f7ec8145d188343edbade07b88f4b995ed2f10a762b3dcaf1dd595cd5960c7c22f176d21fbfa216115d23bd1c9ff
-
SSDEEP
3072:+2LPrKySW/HN/8Wog1qnOo+maJnD7ytVNfFIiFqs7xjKp5DH+IoXkZoutLI:+2DSWFCOqnOR0VNfz7Vo9H+IToSLI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 640307ab09deeeac0ccb2b42c4508e0c_JaffaCakes118
Files
-
640307ab09deeeac0ccb2b42c4508e0c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 126KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE