Behavioral task
behavioral1
Sample
b72b915f59aeecda9f64a8b5015f43b8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b72b915f59aeecda9f64a8b5015f43b8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b72b915f59aeecda9f64a8b5015f43b8_JaffaCakes118
-
Size
176KB
-
MD5
b72b915f59aeecda9f64a8b5015f43b8
-
SHA1
6c22e95bd7a0dcf67636725197759dde0b625e18
-
SHA256
0ad260543bf2263580542d9a3493b9af38827ad40e100bd5d489bf427558ef3d
-
SHA512
7f49f09fca5545badb02600f64a3277aa5bd97bec0e50e3dab528fe9a16ca7ac8273fc6e5ae26b682ce23c34566911d3d1abb833b1a5851fdc4f60b650adaec5
-
SSDEEP
3072:7O0snka+r02brST3e4BXnHMB6XSp+z51XLcqR/+qeXlBZY48Vv/0KYdgC7n:S0yX+rnrSTu4xHMB1p+z51XAk/+qKlPn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b72b915f59aeecda9f64a8b5015f43b8_JaffaCakes118
Files
-
b72b915f59aeecda9f64a8b5015f43b8_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 137KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE