Behavioral task
behavioral1
Sample
69e8ec063f44a1a4ee337ea6e44eaf63_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
69e8ec063f44a1a4ee337ea6e44eaf63_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
69e8ec063f44a1a4ee337ea6e44eaf63_JaffaCakes118
-
Size
65KB
-
MD5
69e8ec063f44a1a4ee337ea6e44eaf63
-
SHA1
33fe0d20034e66df1a746d5850ec2faa5203e604
-
SHA256
356c3f2e70042d3d1fce337a3e6794ab2940136e343cfd7c7bda03f9f52bf385
-
SHA512
377a13a2c87e2892924d9e1ed9a25be8b9c709492d3677579011469040aa80e07b267ffa2db2e3ae9541d470b6b7aa6b2b95d6801cf4a004565c550c88fd313b
-
SSDEEP
1536:e0hzM+U7H1yTD+80POF3q19lVZVhhUL2X2/M:e09MJVwD+8cOFa9LVukH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69e8ec063f44a1a4ee337ea6e44eaf63_JaffaCakes118
Files
-
69e8ec063f44a1a4ee337ea6e44eaf63_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 326KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 485KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE