Behavioral task
behavioral1
Sample
88cd065f7409ca20b5cc1f0e7edb7fad_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
88cd065f7409ca20b5cc1f0e7edb7fad_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
88cd065f7409ca20b5cc1f0e7edb7fad_JaffaCakes118
-
Size
31KB
-
MD5
88cd065f7409ca20b5cc1f0e7edb7fad
-
SHA1
e5fd03cfaa07f7afe86d3009706a03a3a60adcf6
-
SHA256
eae7a0b2834114676ad15064590f1c0c1dd90b4f544c5b34dffa336a73b413a8
-
SHA512
8eb452b4205b4faeb0ff6d16a50e8d4214a0ce071e2af103f28453ff54fd1f6ac2a44570807cc9de02bcf20e56fcf0c24397e9276396eb1889e62b8e2e087d7b
-
SSDEEP
768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFNWK:SKcR4mjD9r823FNWK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88cd065f7409ca20b5cc1f0e7edb7fad_JaffaCakes118
Files
-
88cd065f7409ca20b5cc1f0e7edb7fad_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE