Behavioral task
behavioral1
Sample
8bf522df8700160c115124754c311be6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8bf522df8700160c115124754c311be6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8bf522df8700160c115124754c311be6_JaffaCakes118
-
Size
7KB
-
MD5
8bf522df8700160c115124754c311be6
-
SHA1
d3bbd0303f35db26dba307a17cb1a4866fe63fbf
-
SHA256
5b4a41974e76ebe8f41a54a7d0d43b77d43b18ad350e9a3b4d935052969f4a32
-
SHA512
e703b0394ab60498ec769faa8d4c9bb1b17639562cfb2e28de6d015d77300ae5262c9292ca2087337fefe12e5117983b1ed014a1848bad361559ab06c449d77e
-
SSDEEP
96:MEooc7vMn7PdJJmzlyj9KBuZ8G0J4p6kUSRkdFbueErr3zATFgyF56sHRZ:M1J7Un71J2lYAAZs+i+k3ieEP3UTFJew
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8bf522df8700160c115124754c311be6_JaffaCakes118
Files
-
8bf522df8700160c115124754c311be6_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 904KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 509KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.payload Size: 4.4MB - Virtual size: 4.4MB
IMAGE_SCN_MEM_DISCARDABLE
.opcandy Size: 750KB - Virtual size: 752KB
IMAGE_SCN_MEM_DISCARDABLE