Behavioral task
behavioral1
Sample
9541ccd21d10f524cf460d25a1fe7789_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
9541ccd21d10f524cf460d25a1fe7789_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9541ccd21d10f524cf460d25a1fe7789_JaffaCakes118
-
Size
480KB
-
MD5
9541ccd21d10f524cf460d25a1fe7789
-
SHA1
a7b60bc20c64876632d732b629ef6d9490563a39
-
SHA256
aea5ca7ac1f66568caf509f6dd148464dfda2fafa0cd9df758d787353cad4591
-
SHA512
e24b1db18a3d12c593d84cdb39f34e5abdce1afbf3add4b7553b4628c09efc68196b58a29f2e31354c1109921caf931a2bc1e7755d8322f550501144ca448a02
-
SSDEEP
6144:6lsKC8oI2hITa5e5LPu1YL3/P5ocp6Oh4jslvJIQEUF+le2LmiRTs2aYnqIzHo4T:asZka0dW1YLRpXh4UBerle5y30w/Z1j
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9541ccd21d10f524cf460d25a1fe7789_JaffaCakes118
Files
-
9541ccd21d10f524cf460d25a1fe7789_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5.8MB - Virtual size: 5.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE