Behavioral task
behavioral1
Sample
c8a0a3557fe3fee296fe934391e0ebb2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c8a0a3557fe3fee296fe934391e0ebb2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c8a0a3557fe3fee296fe934391e0ebb2_JaffaCakes118
-
Size
73KB
-
MD5
c8a0a3557fe3fee296fe934391e0ebb2
-
SHA1
c853f44426fb16fcd2320c37e2c5ab2f8ca2f1c6
-
SHA256
21457c5bbd54b871ae4ce354e0e19232ea7ff7086e1356d3d16d5e2f9c255dbf
-
SHA512
568acb10d5fc8cf786eb89c70d1ee4e25208530783692948ab665c272f06fd2091d012a0a9ecdece67fd552f3a636f88e5e950dcf3f7a4be518d9db4d8f60578
-
SSDEEP
1536:+LJ2pdikYItEG1/dIq8E5smaIOGDQOxI29Pfod95N+q2+TInouy8x:+VENY1W/OGpEqI29n+fN+j+Tgoutx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8a0a3557fe3fee296fe934391e0ebb2_JaffaCakes118
Files
-
c8a0a3557fe3fee296fe934391e0ebb2_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 196KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE