Behavioral task
behavioral1
Sample
d256834b78a31071c6474ff2bc56a67a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d256834b78a31071c6474ff2bc56a67a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d256834b78a31071c6474ff2bc56a67a_JaffaCakes118
-
Size
508KB
-
MD5
d256834b78a31071c6474ff2bc56a67a
-
SHA1
25abb8e38a8e7d29ccbe8f4752e83d785c58eb28
-
SHA256
1d2a7911379c5d82eb27eb858468b197f4944acc600e630fa8996405ff8ba6d4
-
SHA512
b9ca75dbd965e8a278f20f1c9724e9ee4e26493ace2aa0932c14f6e78416761c64db55a468b6bfc449589a12ca554bf839580e9861d600389353d2f5738be886
-
SSDEEP
12288:NJJOVOm6aXd/qkk6gUSk1F6YFBClEyRARBbzZZPgjp:8T6yiv/Q3r7CayRc9LPgjp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d256834b78a31071c6474ff2bc56a67a_JaffaCakes118
Files
-
d256834b78a31071c6474ff2bc56a67a_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 348KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 428KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE