Behavioral task
behavioral1
Sample
968f9742641e9679d6664d073417cec2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
968f9742641e9679d6664d073417cec2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
968f9742641e9679d6664d073417cec2_JaffaCakes118
-
Size
113KB
-
MD5
968f9742641e9679d6664d073417cec2
-
SHA1
6d4a114616efe5c00a9302bf31c871a2a761dce6
-
SHA256
251b706c69873a9b660d2fb563340e4dd579e76d4a09d98c3499fdcdfa4d119c
-
SHA512
1628ecc46e7a0cc8f5a5c608908c5b9b5454d9f71479c97e583885b35661fbfb6f16485f7f501daebc2b39d188e99e1b83b1c1f8e49d4a68beeff8e0a0e1c342
-
SSDEEP
3072:miwQoctCdzGMotlpWYTVXaHdhygBY0vHY1EBDD:mi4ctC5GMvcVqHdhfYMP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 968f9742641e9679d6664d073417cec2_JaffaCakes118
Files
-
968f9742641e9679d6664d073417cec2_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1020KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 320KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 339KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE