Behavioral task
behavioral1
Sample
8d3faa99b533520fb516b86d2aa4a7df_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8d3faa99b533520fb516b86d2aa4a7df_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8d3faa99b533520fb516b86d2aa4a7df_JaffaCakes118
-
Size
3.4MB
-
MD5
8d3faa99b533520fb516b86d2aa4a7df
-
SHA1
2cd0c04f4b3b8297e6b6d9e25498aa47d1f4fd02
-
SHA256
5b327c541d95c2828a5509a381d20e9de69ab3da3e13d247dc6c3a941411aee3
-
SHA512
cd551eaf3d98e5f797b2225854eff2368b8c6f3e539036c5a37b2acb04cee7714c5b68590575261370f8ac64c79151ba98543b8cc9193237d30b1d79c6deb71b
-
SSDEEP
24576:PoH9mrnEQIh3Qh3OTZriEu8CkB06lVYtjbTpmWFb5DBk:PoFQC6mZq8J2OVijbTpTdO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d3faa99b533520fb516b86d2aa4a7df_JaffaCakes118
Files
-
8d3faa99b533520fb516b86d2aa4a7df_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CiAaJvUQ Size: 56KB - Virtual size: 55KB
ukABQpok Size: 68KB - Virtual size: 67KB
MIdNEEhc Size: 43KB - Virtual size: 43KB
qvgGbzBV Size: 427KB - Virtual size: 427KB
gOrOCtHQ Size: 90KB - Virtual size: 90KB
zmKmtaje Size: 196KB - Virtual size: 196KB
uBkFkyzO Size: 50KB - Virtual size: 49KB
azrLzzMU Size: 40KB - Virtual size: 39KB
JblDWdQQ Size: 32KB - Virtual size: 32KB
hvhWUgLo Size: 23KB - Virtual size: 23KB
yAravFQa Size: 30KB - Virtual size: 30KB
JpnywLZk Size: 512B - Virtual size: 19B
fBbKwCWE Size: 49KB - Virtual size: 49KB
BtbmqjVJ Size: 22KB - Virtual size: 21KB
heowsMQE Size: 174KB - Virtual size: 174KB
BoMVNvLh Size: 15KB - Virtual size: 15KB
uARSLXoz Size: 512B - Virtual size: 447B
hkQISqom Size: 361KB - Virtual size: 361KB
HemRrQPz Size: 96KB - Virtual size: 95KB
pLgJMcuM Size: 152KB - Virtual size: 151KB
HjQpCosR Size: 39KB - Virtual size: 39KB
ryPByDxw Size: 3KB - Virtual size: 3KB
lsnEDKSV Size: 26KB - Virtual size: 25KB
qYhKXGET Size: 15KB - Virtual size: 15KB
sldkiFdP Size: 18KB - Virtual size: 17KB
AlDmoiXp Size: 32KB - Virtual size: 31KB
SyustBRq Size: 32KB - Virtual size: 31KB
QxJvnpow Size: 38KB - Virtual size: 37KB
PeZXqQdG Size: 1024B - Virtual size: 816B
dzYkcqWp Size: 12KB - Virtual size: 11KB
lyeHrQLY Size: 29KB - Virtual size: 29KB
ANLuIWLf Size: 49KB - Virtual size: 49KB
ltgOayso Size: 7KB - Virtual size: 6KB
KIgQNXJf Size: 4KB - Virtual size: 3KB
XZWpmeqU Size: 17KB - Virtual size: 17KB
JMZDWiZA Size: 4KB - Virtual size: 3KB
FFVDRyYn Size: 26KB - Virtual size: 25KB
XOVUCUQH Size: 36KB - Virtual size: 35KB
QmYPWrrf Size: 84KB - Virtual size: 83KB
QfrdbOFM Size: 55KB - Virtual size: 54KB
bWalhEDe Size: 53KB - Virtual size: 53KB
rHICMRwV Size: 172KB - Virtual size: 172KB
AkMAOudN Size: 16KB - Virtual size: 15KB
SSrhbJuq Size: 55KB - Virtual size: 55KB
UkjfXwjJ Size: 53KB - Virtual size: 52KB
UxJVyjbm Size: 10KB - Virtual size: 10KB
axfuNUec Size: 27KB - Virtual size: 27KB
viPcPLGV Size: 20KB - Virtual size: 20KB
mtfJrBlJ Size: 108KB - Virtual size: 108KB
bgwsRJzL Size: 6KB - Virtual size: 5KB
euyTSdFE Size: 40KB - Virtual size: 39KB
fBoZCOZA Size: 55KB - Virtual size: 55KB
gOfSRqQb Size: 13KB - Virtual size: 13KB
bwwIDJxI Size: 22KB - Virtual size: 21KB
SZbuqXTw Size: 37KB - Virtual size: 37KB
LHqjnRvM Size: 4KB - Virtual size: 4KB
ykCNXFiE Size: 51KB - Virtual size: 50KB
MikpafFi Size: 52KB - Virtual size: 51KB
HpOplHIK Size: 37KB - Virtual size: 37KB
usPWheEZ Size: 1KB - Virtual size: 1KB
MDiVLAIv Size: 44KB - Virtual size: 43KB
LhLyBnSn Size: 512B - Virtual size: 411B
vVjPhmfG Size: 49KB - Virtual size: 49KB
lFXXdIXd Size: 38KB - Virtual size: 37KB
XLbPQmfF Size: 27KB - Virtual size: 27KB
DBhymWIe Size: 13KB - Virtual size: 13KB
RJpfYOKb Size: 4KB - Virtual size: 3KB