Behavioral task
behavioral1
Sample
b9d0103c6a268a8754fe5172088dcb12_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b9d0103c6a268a8754fe5172088dcb12_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b9d0103c6a268a8754fe5172088dcb12_JaffaCakes118
-
Size
460KB
-
MD5
b9d0103c6a268a8754fe5172088dcb12
-
SHA1
bac205941f691e8d5efa1ec583559aed9667ecf2
-
SHA256
c63b8ae4de61b1e7197b9b36785710f73b2274c8023c3584325be5d926f8290c
-
SHA512
3cd4d14bee3a40356a534b0d704c17c2c2edd02b266ce8ae96b616ea024d71b86f8a78c52d9a29ca9e8d3a65ba58ef958665a436e165e702a2ddf8cac9696bdd
-
SSDEEP
6144:ZYZTNk3D6LyUXwLLk+cR3qh0GQ43VJRD0ew2fPDZj:ZSNC80I+cR3R03Vse5fPDZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9d0103c6a268a8754fe5172088dcb12_JaffaCakes118
Files
-
b9d0103c6a268a8754fe5172088dcb12_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 448KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.LUPX1 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE