Behavioral task
behavioral1
Sample
0c9ab4b136a1474bddb7a043c9f82eee_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0c9ab4b136a1474bddb7a043c9f82eee_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0c9ab4b136a1474bddb7a043c9f82eee_JaffaCakes118
-
Size
77KB
-
MD5
0c9ab4b136a1474bddb7a043c9f82eee
-
SHA1
907e9e3a732a3d54197a1b46884d4d5ca93e5989
-
SHA256
7b913c75f258c37c802c95fb2983afd687ea15e3e4b1770b221c7993cef2138b
-
SHA512
98ec2189c241c99d818eca72b4b7aaf37a15e9c26dfb2c1c52865fd5acc2755483018c3fc749e9422d0c80e89ea6a23f1a962f9f8704dd4fadf0fc691a734f58
-
SSDEEP
1536:tvylhzDs9yxQV/RUSAMD9P35dvGm/3ac69/Mc8OgNLCR2g:8lFDEKo/SSx7T/3IhMc8OgNI2g
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c9ab4b136a1474bddb7a043c9f82eee_JaffaCakes118
Files
-
0c9ab4b136a1474bddb7a043c9f82eee_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 252KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 167KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE