Behavioral task
behavioral1
Sample
dab3fbe504041eacd95ab92ff34891bb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dab3fbe504041eacd95ab92ff34891bb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dab3fbe504041eacd95ab92ff34891bb_JaffaCakes118
-
Size
946KB
-
MD5
dab3fbe504041eacd95ab92ff34891bb
-
SHA1
6c2fd56e02fb9767a19df4017e077d990307bccf
-
SHA256
742a54c882e88892ad8198dbb918d4ffeb47a1c8a7e1bf35d98d53c465dd2c3f
-
SHA512
b30e0fd1230067e9e9f174b23e052395575c238e0be838faa0b305ec1ba68b4825046e404a5857844af92b96a4138a3c6c7f27c00cfe8aeeff76b756bae15443
-
SSDEEP
24576:zyJPMY6lu197K+s85fTFuhZKhi2UQsOR3ZiKSK5Fk81:b89GoTFWQh/s2ZiKVzk8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dab3fbe504041eacd95ab92ff34891bb_JaffaCakes118
Files
-
dab3fbe504041eacd95ab92ff34891bb_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 942KB - Virtual size: 944KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE