Behavioral task
behavioral1
Sample
ba3769420c6a2216bc7668ab5fcf25d4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ba3769420c6a2216bc7668ab5fcf25d4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ba3769420c6a2216bc7668ab5fcf25d4_JaffaCakes118
-
Size
41KB
-
MD5
ba3769420c6a2216bc7668ab5fcf25d4
-
SHA1
860a8877ed37fe9b1634c0eda546a83c9b413977
-
SHA256
60543723dd1eccc1035d1ba4ab6ba7bf65f0548a745054c671780da322fd1d36
-
SHA512
c52507599d38309e5dd5cf766b8f6e13ac3074c9d02406dd753b86ba94cdce32c9225d4d983eb06554a4eb89d22ba2ed70c914f15288475f72ad2d995e840428
-
SSDEEP
768:6/jlBdTJAgBG8efoAUKJGKhjhuUozpiDlFXhaStAr5FSi2rRU3XVwCoH6cunbcut:MlfTCgBG8coyUUHnxhArDSxRU3X+Coaf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba3769420c6a2216bc7668ab5fcf25d4_JaffaCakes118
Files
-
ba3769420c6a2216bc7668ab5fcf25d4_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE