Behavioral task
behavioral1
Sample
051d547574940052f3fcc4b82ab9a9ee_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
051d547574940052f3fcc4b82ab9a9ee_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
051d547574940052f3fcc4b82ab9a9ee_JaffaCakes118
-
Size
97KB
-
MD5
051d547574940052f3fcc4b82ab9a9ee
-
SHA1
e2a101860142d03c87d3eeea0a9e787c65456646
-
SHA256
7bf27b4b7e0392a51896469a0235241708e63a4b45c8ed387d1bb296ec9a2e86
-
SHA512
de626f8b52e7208342654f53d21de0faf3f4eb307b9a8ceaf51d2f0b3249e7d4260a97fd111e1a1193aee74734734bf6ba3fae28d148ee0b375efaadf9c55d24
-
SSDEEP
1536:bu4TfcVRvH3XNeQQP88kXx/E19bLwR1jQ8VHGOLBIRWHvys8tS++A9O8:K4TfcHv3XAQly1dLmVHjL6Was8tBH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 051d547574940052f3fcc4b82ab9a9ee_JaffaCakes118
Files
-
051d547574940052f3fcc4b82ab9a9ee_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE