Behavioral task
behavioral1
Sample
a9d922878ed07884e7b0268e29a0a916_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a9d922878ed07884e7b0268e29a0a916_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a9d922878ed07884e7b0268e29a0a916_JaffaCakes118
-
Size
3KB
-
MD5
a9d922878ed07884e7b0268e29a0a916
-
SHA1
c1a66c80c3e9e7a054fbc0709fa0e157a3e5aa10
-
SHA256
a70989a015a4750c013db5ac1b4f352e3786d3505900c62e09269bc97c519e6e
-
SHA512
b098c3996306ae72f10c5f99ce89b1d181e6770d66ec3210d67fa719a9fcbf7f63f74671495378c9d7ec04228974e5ca9ba5a9f9d451c443b944c7feba499aae
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9d922878ed07884e7b0268e29a0a916_JaffaCakes118
Files
-
a9d922878ed07884e7b0268e29a0a916_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 891KB - Virtual size: 892KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE