Behavioral task
behavioral1
Sample
87e087f9a81b4bb5acfd666ab053bfab_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
87e087f9a81b4bb5acfd666ab053bfab_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
87e087f9a81b4bb5acfd666ab053bfab_JaffaCakes118
-
Size
297KB
-
MD5
87e087f9a81b4bb5acfd666ab053bfab
-
SHA1
929d3c5f0ae3f538431b4545f43c9602637ec097
-
SHA256
de3e46bc539f55d5f5337ba1e287c5452dc22b9a511f0ba2316f030d5f2bfec7
-
SHA512
7ee43e628dd691c8262fa0b263aacc0b04c056d80a89fac00a16bf0b3d7c07c078328ea1f436b0e9e74d0b5f7ff136299320977723cd63a2abba80af06d08d95
-
SSDEEP
6144:hGOuNGKAnRd5Nkqqg9bzzb4VK/3QIYxWBuyC1MaN3vMkjJ3bAqOo4:hWNcnP5NTqg9bnb4VQQmB81UkjWo4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87e087f9a81b4bb5acfd666ab053bfab_JaffaCakes118
Files
-
87e087f9a81b4bb5acfd666ab053bfab_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE