Behavioral task
behavioral1
Sample
0702a47469fb24097101aae1c6c6cdb2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0702a47469fb24097101aae1c6c6cdb2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0702a47469fb24097101aae1c6c6cdb2_JaffaCakes118
-
Size
115KB
-
MD5
0702a47469fb24097101aae1c6c6cdb2
-
SHA1
2651e587be799449519e6007d0e8022a242523be
-
SHA256
11d37c2ae5f056560a6f90a6d6fbd554763a08ef5453ee914e301dfc7b4644b0
-
SHA512
5cb1a224517f2944208df39a031337755ca9a9282e2d548f326d6685adeff9693f5422ed8ca8e30f2287a838e14e1ae66b9152487495f8fd93de10558aad149d
-
SSDEEP
3072:SKcWmjRrz3ZKcWmjRrz31BJEGY075ySUy7ohgBsLHy1W:hGyGRdYU7UAqy8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0702a47469fb24097101aae1c6c6cdb2_JaffaCakes118
Files
-
0702a47469fb24097101aae1c6c6cdb2_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE