Behavioral task
behavioral1
Sample
655ad18ff0be681a1e8354d750ba304f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
655ad18ff0be681a1e8354d750ba304f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
655ad18ff0be681a1e8354d750ba304f_JaffaCakes118
-
Size
6.0MB
-
MD5
655ad18ff0be681a1e8354d750ba304f
-
SHA1
945e01ef29385c0ccb9e2ba739b69e4efa7ec865
-
SHA256
e02b8490c6ff50b1adcfd4b05bb9a8a2dbc429510e03e3c9931f91fca733ed3e
-
SHA512
73a63294f647062d157f1d016c8878967fccb904ddfa43409bf11f6ef4a026484003b3595f732a2aa5ad5dfb1eed6d542f9d3eb3f4cf89f3283e1a6f87ad1015
-
SSDEEP
98304:PAH/7ocAJcRwsf1uaHLV+Qih2/wq/MBZA7qSrvOsxT4oP7nNGftndh:CUp+Rv5LV+QHDswiS7nNA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 655ad18ff0be681a1e8354d750ba304f_JaffaCakes118
Files
-
655ad18ff0be681a1e8354d750ba304f_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 852KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 279KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE