Behavioral task
behavioral1
Sample
83098e239f9534c1ae5004b0db5693f7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
83098e239f9534c1ae5004b0db5693f7_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
83098e239f9534c1ae5004b0db5693f7_JaffaCakes118
-
Size
582KB
-
MD5
83098e239f9534c1ae5004b0db5693f7
-
SHA1
4ec95de292c153cf8b88bb69b970c401426f58c9
-
SHA256
8ec29db9610c345d5f62bd6b32b837ca131fcc9430a2ef450c7c58be71323b88
-
SHA512
1d1d0da7085ec3896ab5e468f0442f42f3042b73f81fefca895afb0679f81aa1bb96cfea8721fec48571dc459198d1cdd04c04a51630c8e4f33ac77f3b3efaae
-
SSDEEP
12288:NJJOVOm6aXd/qkk6gUSk1F6YFBClEyRARBbzZZPgjk8g1am/:8T6yiv/Q3r7CayRc9LPgjhzm/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83098e239f9534c1ae5004b0db5693f7_JaffaCakes118
Files
-
83098e239f9534c1ae5004b0db5693f7_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 348KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 428KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE