Behavioral task
behavioral1
Sample
8918a53cc13b145818a37d02a2757f32_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8918a53cc13b145818a37d02a2757f32_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8918a53cc13b145818a37d02a2757f32_JaffaCakes118
-
Size
298KB
-
MD5
8918a53cc13b145818a37d02a2757f32
-
SHA1
714ef9e3cda105b60c6bf06a5b873f83d9f49837
-
SHA256
24c22c57dba49fe29a8ef69bec7c199f23139ab7667846656a6d1ac0741c8d01
-
SHA512
94f55c70d3d778e5ee5f82dc2e23f0a47a247e24bb6109c6a2c75a32d972cd76464691cc7dd39b62a685b943758a0822f7be67861d4b12bef49cbbbed21fd909
-
SSDEEP
6144:WHzqDjRjy87IF5RHYWs/ivmD//w/aavZi:yzqRr7IFX4WefDHgasZi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8918a53cc13b145818a37d02a2757f32_JaffaCakes118
Files
-
8918a53cc13b145818a37d02a2757f32_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 322KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 344KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE