Behavioral task
behavioral1
Sample
f059e41ba2584383bd47cca923a11ea2_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
f059e41ba2584383bd47cca923a11ea2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f059e41ba2584383bd47cca923a11ea2_JaffaCakes118
-
Size
75KB
-
MD5
f059e41ba2584383bd47cca923a11ea2
-
SHA1
56a2ebbd5fed101d78f05bc03ed8c40681c61539
-
SHA256
d276bb39fe545fa44438f9c463c284a4fa65cceebb8f0bb3980c344da56bc818
-
SHA512
616190bba241ada6521ec85f535c59e01b9e55c275a26581922cd1ffcfd098aa1ebb78326d6005e5a1b8d94e14a3d3cd0fa5b163ae9f1efebb9f0a8842cede5f
-
SSDEEP
1536:AvSXczExx+fmO6N3FRSmQYu19zgzEBygXAOVG6Wjnouy85MJ:uSMkUJ6haF9zgEtXAOtWbout5MJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f059e41ba2584383bd47cca923a11ea2_JaffaCakes118
Files
-
f059e41ba2584383bd47cca923a11ea2_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE