Behavioral task
behavioral1
Sample
dacb2132e7e669d9801e3b8df15f45f0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dacb2132e7e669d9801e3b8df15f45f0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dacb2132e7e669d9801e3b8df15f45f0_JaffaCakes118
-
Size
165KB
-
MD5
dacb2132e7e669d9801e3b8df15f45f0
-
SHA1
b81b261dbe3f8c1e6404c2b38664dde9bee4a5f6
-
SHA256
182a5cff66f89a930ed3f4401c81547e998b4167983136f42fb8ac6097d98470
-
SHA512
f960c32761e2268413bf94f51a50de08af7dde707bb876e6651a178ac0a26c02acb5e3dcb982658b9a9ad3c7bba0359aba4e5d3d9467b2559d7e66e25b294913
-
SSDEEP
3072:qQYFLRuYv+qLVaLdalhH1f1Ku72PbiBxymp38zr1jT6lq8xUWarzlRHwZ:qhLRuYv/LVaLi1/iPnACJqlqiUWarzrI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dacb2132e7e669d9801e3b8df15f45f0_JaffaCakes118
Files
-
dacb2132e7e669d9801e3b8df15f45f0_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 648KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 650KB - Virtual size: 652KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE