Behavioral task
behavioral1
Sample
b6b8c9ac20d61de646cdbeb151ad0cd4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b6b8c9ac20d61de646cdbeb151ad0cd4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b6b8c9ac20d61de646cdbeb151ad0cd4_JaffaCakes118
-
Size
25KB
-
MD5
b6b8c9ac20d61de646cdbeb151ad0cd4
-
SHA1
de34ada2994100a05e96cdbf99deb2a260710b0d
-
SHA256
766f4b2ece4dcc064c5711c2a9bb78a154fbc46f1e3e03d26df8e01ab96ca224
-
SHA512
42b50edc180fa5454f9c87800bcdd7a549cba327c81a1f4a6f300e97a03ed3dbc598000ebfa8d230517760b44ed82c95539fe4dc8044aab2aff6478a84cea50e
-
SSDEEP
768:kvj+Y4roYgbJnCtWNFu2p3z5bRoCiR9X1FI:kvSFoYgdzTZp3zP1E9g
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6b8c9ac20d61de646cdbeb151ad0cd4_JaffaCakes118
Files
-
b6b8c9ac20d61de646cdbeb151ad0cd4_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 480KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 298KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE