Behavioral task
behavioral1
Sample
8633356e9539aa8a72c67ace17c09a57_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8633356e9539aa8a72c67ace17c09a57_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8633356e9539aa8a72c67ace17c09a57_JaffaCakes118
-
Size
533KB
-
MD5
8633356e9539aa8a72c67ace17c09a57
-
SHA1
52bcb955ecdeeba30c8ca77b4d4124820662bc56
-
SHA256
1767c43fc41663d4e05cb1b74834f0f8156a860ad7fd4ef17507a9662d6e127f
-
SHA512
e4c06401bfc7a49f9292244f16a11c946458367b5e4906370b535cc90a6f9f4c23d5f53ea4bbf918983c3eec4f8982d2910928321e8c817629b326055ee64e0f
-
SSDEEP
12288:VvUGNDMRh6cLVLQ3tw0D/v9p5jk1F6YFBzwmEyoARBbzZZPgjk8p:eh6chYus9g3r7zwlyoc9LPgjhp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8633356e9539aa8a72c67ace17c09a57_JaffaCakes118
Files
-
8633356e9539aa8a72c67ace17c09a57_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 351KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 428KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE