Behavioral task
behavioral1
Sample
deac0336922b4a3b6ace3f819366e138_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
deac0336922b4a3b6ace3f819366e138_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
deac0336922b4a3b6ace3f819366e138_JaffaCakes118
-
Size
41KB
-
MD5
deac0336922b4a3b6ace3f819366e138
-
SHA1
84d2ffc3155b41080757681f293a73b1ddca3ded
-
SHA256
c1deb6a8ae57fa10567cb1065b1202c1ccc87aa456b6e83dcd218d20677d7781
-
SHA512
42a282b8384d838d8a3368ce2f3336182037c783f9257ecc874f4c8ad5bad5263242f769b43c973a4451aa4b5533da3794ab5b5c13db685875a1d616b64abffc
-
SSDEEP
768:6SVQqzDhyhOgha1zCxPmmW5X0h22NRWLmSzBIVDrPFi7d5MkHNkdnbcuyD7U:6SiqPhyhOgha12+mw0bNumOBUrdiHMkm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource deac0336922b4a3b6ace3f819366e138_JaffaCakes118
Files
-
deac0336922b4a3b6ace3f819366e138_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE