Behavioral task
behavioral1
Sample
93f3ae5e1e1a5c0789fb09b4720185d6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
93f3ae5e1e1a5c0789fb09b4720185d6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
93f3ae5e1e1a5c0789fb09b4720185d6_JaffaCakes118
-
Size
124KB
-
MD5
93f3ae5e1e1a5c0789fb09b4720185d6
-
SHA1
3e4d952d63a60f711f46e790a6db02efb3f4e20a
-
SHA256
f6b74e4cc1fcf086a9d1c7cb6686e3d325020e1192d8984b95b79665da62c405
-
SHA512
02418b6ec7e7fea42a8e8731fa539cc50a91ecd3a8f8d36a27b1fc49301e9e046c4d3e5afa85ee470c7f4b20925155e2206326acc8535aafe010bbe106adeb6b
-
SSDEEP
1536:9C/PB8Mb+bzsooHgAAt8cdrHTCL4Dt9iaZokJwlf34hFdfNh5:yP1+b4ooAAA6c9RJoaZoV94hFdl3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 93f3ae5e1e1a5c0789fb09b4720185d6_JaffaCakes118
Files
-
93f3ae5e1e1a5c0789fb09b4720185d6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE