Behavioral task
behavioral1
Sample
9485a7b45fca29553c3beefb8f0f34f0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9485a7b45fca29553c3beefb8f0f34f0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9485a7b45fca29553c3beefb8f0f34f0_JaffaCakes118
-
Size
87KB
-
MD5
9485a7b45fca29553c3beefb8f0f34f0
-
SHA1
0483f0c3f9b16beb1d4e0e45006282ef9fb13757
-
SHA256
5c3c9e73b5626493bc83459a40239e635d264b6719e4e6aeebc1411e1482db52
-
SHA512
0497f038be9a6dd50d5c1d4b41146928fc9dcd1e690bb14d63545490760ebb7fef1a815254e0a528efcb58012d3d37142e989eb26e18632a16883099cfadd508
-
SSDEEP
1536:5A6o55nHtO4Wb8gd67VvEcsIwnom6UJMj0rbd1DPuo4Y/xetYiKk/:5h6nNO4WbZ0VPsIwB6LjKd5eY/gCk/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9485a7b45fca29553c3beefb8f0f34f0_JaffaCakes118
Files
-
9485a7b45fca29553c3beefb8f0f34f0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 138KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE