Behavioral task
behavioral1
Sample
96a4a82a4be33a950f4530e1f6202b8d_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
96a4a82a4be33a950f4530e1f6202b8d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
96a4a82a4be33a950f4530e1f6202b8d_JaffaCakes118
-
Size
97KB
-
MD5
96a4a82a4be33a950f4530e1f6202b8d
-
SHA1
3a0f38e765c83540836f4bf9b03016131beec85e
-
SHA256
d442871216e26ba04c3bf0694de431791124ccdb967d9af496be625c49c0c8a0
-
SHA512
937605e0aaffabf0367dba790008946b7b406eab466bc65d4ee771cd161551d357594d641c16d4e98d0b046c6dc7badf9953cfb72820040896f685e2e729f752
-
SSDEEP
3072:prDyYxY7rZSIsvnPBhyz957WMHsqOnjVc+qs:prDJa7rspPBcndOjm+qs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96a4a82a4be33a950f4530e1f6202b8d_JaffaCakes118
Files
-
96a4a82a4be33a950f4530e1f6202b8d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 372KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE