Behavioral task
behavioral1
Sample
b03926e59c567e7ca7be59d199f3af0d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b03926e59c567e7ca7be59d199f3af0d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b03926e59c567e7ca7be59d199f3af0d_JaffaCakes118
-
Size
577KB
-
MD5
b03926e59c567e7ca7be59d199f3af0d
-
SHA1
4b29b52bf5af218e743cc087ea57cc6605dc11a4
-
SHA256
28ed5366ee88adb7532fcd23f31876b68f0a1a0b45934525ac45bc1c0243d5dd
-
SHA512
021cc915c9457c32ed79ef84aed2498724ac9ebaec66d99f1981eb93695900685f7123ff8ea8cb6d7eb898b218e63088e57376bb6d29cbba806f98fdbd23e9ff
-
SSDEEP
12288:VvUGNDMRh6cLVLQ3tw0D/v9p5jk1F6YFBzwmEyoARBbzZZPgjk8g1a7:eh6chYus9g3r7zwlyoc9LPgjhz7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b03926e59c567e7ca7be59d199f3af0d_JaffaCakes118
Files
-
b03926e59c567e7ca7be59d199f3af0d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 351KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 428KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE