Behavioral task
behavioral1
Sample
a6f83e50dd23ee536e9b77134326cb35_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a6f83e50dd23ee536e9b77134326cb35_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a6f83e50dd23ee536e9b77134326cb35_JaffaCakes118
-
Size
75KB
-
MD5
a6f83e50dd23ee536e9b77134326cb35
-
SHA1
10d63ce6dda116c7ee81e15775ec283950693171
-
SHA256
d2b2b274263278d9040a39ee49e31cac0fe5b74441f9db6848e022f66ccfa6a5
-
SHA512
b9cfcd57e1d9b8a27db59fc619af67752395b7e6cabd285c5bccab8d54158a8525ef7eec35c8c49cc2bcf1583beb846b89a6c809eebd3bd8cbd3ae036d3736b7
-
SSDEEP
1536:sm80ozWLo+7E/AKOScUJzUoMCIyIrfZoFq2mI4qdcnouy85MJ:XozWLpC6SjJ53I7fZa3mIBeout5MJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6f83e50dd23ee536e9b77134326cb35_JaffaCakes118
Files
-
a6f83e50dd23ee536e9b77134326cb35_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE