Behavioral task
behavioral1
Sample
b6c453851913dc308d7f99e10069437e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b6c453851913dc308d7f99e10069437e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b6c453851913dc308d7f99e10069437e_JaffaCakes118
-
Size
972KB
-
MD5
b6c453851913dc308d7f99e10069437e
-
SHA1
cac69acdd4332635306510b12fd165792bdc9c17
-
SHA256
4d7c4a3857f28985265831ad7265f309100b09ca33248f89da2713809a5d32ed
-
SHA512
9d86584e6b2dff1d7e18ba6711527dc739488967b1d47336995be9f13e476585236f60b2ca1203e630a0657e92cc3696b1e28d9a2a523070986650279d63e420
-
SSDEEP
24576:FPKoTu2tD/8zPLYkUcWQAVNrnUcnL5GfTlnSYzotmKw:FSoTu2tEU/NNrUuNycCm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6c453851913dc308d7f99e10069437e_JaffaCakes118
Files
-
b6c453851913dc308d7f99e10069437e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 968KB - Virtual size: 968KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE