Behavioral task
behavioral1
Sample
04299ed4d13a1067ab6973a99c09b2d4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
04299ed4d13a1067ab6973a99c09b2d4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
04299ed4d13a1067ab6973a99c09b2d4_JaffaCakes118
-
Size
405KB
-
MD5
04299ed4d13a1067ab6973a99c09b2d4
-
SHA1
8227f7bd731ceffe3c05088757aeeafd1e1e3a2c
-
SHA256
ab240659a7bfca74499d5547405a3c14dfdfb6cd01feeff3a488175d66aa083b
-
SHA512
5106e52254ecbc60b632380843ab822079934e12b5d985f3c77334f160959ee1645247bbbb6e531305ee6916b727d30103f6a8ef82c061575cc73fead7522e73
-
SSDEEP
6144:AZvMGAJ8BVynq0bldvNZFH4z+A/5iD9lhoL5wwmq7u9rhZ:AdMQ4RJdmZiD9Il7mzlZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04299ed4d13a1067ab6973a99c09b2d4_JaffaCakes118
Files
-
04299ed4d13a1067ab6973a99c09b2d4_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE