Behavioral task
behavioral1
Sample
f9aec29aa3d613d73676a9eadd53d3a9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f9aec29aa3d613d73676a9eadd53d3a9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f9aec29aa3d613d73676a9eadd53d3a9_JaffaCakes118
-
Size
101KB
-
MD5
f9aec29aa3d613d73676a9eadd53d3a9
-
SHA1
569412016d4c30dfa86367244a7cda9f5ea58fce
-
SHA256
49393bde716a2c3d06adb0d7cb0bc843bddcfcc46c005a5f5f1396044a6787ba
-
SHA512
f4fc8f2aeda136f2ebd4b147dbe7742f33e6a895fca329f19a0b9ff1fe2155457870fad3f635c50780c38bf867c6b4952e8bd0cc237933e401bb6517e1c9a4ce
-
SSDEEP
1536:mT/j/Mqms1+qBa6UVDtjTrCzrXoZWMzMzLvsO++JF8PJ5Y/GRZINpEYK:mTTMqhPSQsZfMzL0MJGFNYK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9aec29aa3d613d73676a9eadd53d3a9_JaffaCakes118
Files
-
f9aec29aa3d613d73676a9eadd53d3a9_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 256KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE