Behavioral task
behavioral1
Sample
b6023813563094350955a84ccd86d37a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b6023813563094350955a84ccd86d37a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b6023813563094350955a84ccd86d37a_JaffaCakes118
-
Size
83KB
-
MD5
b6023813563094350955a84ccd86d37a
-
SHA1
ad3aef6d5273a26d0a30d820cea585ca37c3f566
-
SHA256
5d04bc23a2f476f738b3ce0597ffc4d290574da24cd793845c5c36c990b343fc
-
SHA512
2dc6f704b60ed2bb942bc3be91b8b87a8f7c1156a5de6d13b3552ab4954934c699a89f95352a0cffa5b95afea8306385637addca8efedd32112310fe8f1dc955
-
SSDEEP
1536:BC0hH9ywlr4dAY6F9Ga7bs6nMBbRel7e/Vi0Bs4ghnouy8:g0hkw6H29z7bs6MtReEVh1gBout
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6023813563094350955a84ccd86d37a_JaffaCakes118
Files
-
b6023813563094350955a84ccd86d37a_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 444KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE