Behavioral task
behavioral1
Sample
96aa8020c25cdb91eb5c40a193e961a7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
96aa8020c25cdb91eb5c40a193e961a7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
96aa8020c25cdb91eb5c40a193e961a7_JaffaCakes118
-
Size
211KB
-
MD5
96aa8020c25cdb91eb5c40a193e961a7
-
SHA1
2574503a9e9c05950546aac8f267ab0e11025675
-
SHA256
18ced1d35ee6564ff709a7f1f61d68fc9d7daeb01d009a29d617c5713c39d424
-
SHA512
13beae9d15b61efcb97fbf6cfe219344260ac956bbf15149b73a6255f6935ab1defa6a1cb6c95b28c7b841d575b6e20124a3932840776c8ef4ca6e5886258737
-
SSDEEP
6144:gfKYTPUpp57VdR4FmJ7O0pcij6jvjbTZyYAxc/v1:orTPU9mmJpKjbdyLY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96aa8020c25cdb91eb5c40a193e961a7_JaffaCakes118
Files
-
96aa8020c25cdb91eb5c40a193e961a7_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 792KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 699KB - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE