Behavioral task
behavioral1
Sample
d99ab13725e1b78f042c0d84f2e3cc0c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d99ab13725e1b78f042c0d84f2e3cc0c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d99ab13725e1b78f042c0d84f2e3cc0c_JaffaCakes118
-
Size
44KB
-
MD5
d99ab13725e1b78f042c0d84f2e3cc0c
-
SHA1
9f729e04a11d4cd2adf577a05fe1341f7288c56e
-
SHA256
7aa54c5d96bea5cc628c63d9d90defa213c6063cbca421706e1eb72a964a17c9
-
SHA512
1f5b8878f46ceed9b0f109ff16c9dd584f6cd5d57ba27f14df258d2065a614a122f7cf81afd40ed7620a94c96b5812d0f85059c1aba84c2fa830c61ae9cdc24d
-
SSDEEP
768:85Foi5zhaHm7/6ZjY6c6e2hEzSHWwPpJszWBNiCwiM2qYezlTHfYuU2Cqsl78yBq:W5zARZEuhEzSHWmsjziM2qYep/5UlqsK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d99ab13725e1b78f042c0d84f2e3cc0c_JaffaCakes118
Files
-
d99ab13725e1b78f042c0d84f2e3cc0c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE