Behavioral task
behavioral1
Sample
d054c516a538022e9a1d12aa10420749_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d054c516a538022e9a1d12aa10420749_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d054c516a538022e9a1d12aa10420749_JaffaCakes118
-
Size
252KB
-
MD5
d054c516a538022e9a1d12aa10420749
-
SHA1
3383fb0bb4e3f797e80cb56335f0a1f9d8fa4581
-
SHA256
5a89b85f539605653d17dfde82d906ffee3acf23c6125e99117125abb8c536cd
-
SHA512
36e22d55d71c239976f2623fb718a01e48bea97dbef7a69858580b2431713c34193de12c682e6127a69cf4644ce547abb673f2263031b83f5034f0971e5f079f
-
SSDEEP
6144:6GSPCzWONw6EDZhiukNy3NNz0YyGEWdr2uvPgvmWsnq:67KTWeCNNzCqdPvPO0q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d054c516a538022e9a1d12aa10420749_JaffaCakes118
Files
-
d054c516a538022e9a1d12aa10420749_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 324KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 344KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE