Behavioral task
behavioral1
Sample
8a9be6a90f3dfed61f92ec390fb05009_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8a9be6a90f3dfed61f92ec390fb05009_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8a9be6a90f3dfed61f92ec390fb05009_JaffaCakes118
-
Size
78KB
-
MD5
8a9be6a90f3dfed61f92ec390fb05009
-
SHA1
97bbd4b6ddad4a092c44228af84a00c4f1c958c2
-
SHA256
06040549cf471f83597570b1df8eb2726360ecdb5c0efaeeefc4189853adc405
-
SHA512
db33b0c0320882ac87ad5c8d15281c0f6975662e383ab8c4b1561cf5a326be2999932e6fd092064b21b60bf19bc24e6d98ead581de6849570996b51a5766e0a1
-
SSDEEP
1536:X87R/+D2IsiNk4AoHtBrg5GgnAt4ydlQ0JCOyFFzanIgh3NL+vrx0sZLqD0ae:o/+6ZC3gdAp9JQz2Wl0j0n
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a9be6a90f3dfed61f92ec390fb05009_JaffaCakes118
Files
-
8a9be6a90f3dfed61f92ec390fb05009_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 322KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 344KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE