Behavioral task
behavioral1
Sample
09d51a87856de9523041766cffcf9b77_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
09d51a87856de9523041766cffcf9b77_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
09d51a87856de9523041766cffcf9b77_JaffaCakes118
-
Size
204KB
-
MD5
09d51a87856de9523041766cffcf9b77
-
SHA1
2178a7b26d755c74fb1f68b84b80a2a8d03c1905
-
SHA256
dd233e11f0ebbb2f1b9fc9b1f55f54d480cffb75e269f62f81707df24c7dc415
-
SHA512
142f2b43c5747406936bfebf7ecbc56c23f0fb33df7fea31682f19caa89d71d59904413bd10b02d814f3cf9a9993ebc8e8389210cb0e9ff7cc9550ada7e95adc
-
SSDEEP
6144:ub7ndrDGHxFaw8/dWpwl+mYurn4RXKw1GA:g7nNGHxFaw8/oOl+Zqn6Kw1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09d51a87856de9523041766cffcf9b77_JaffaCakes118
Files
-
09d51a87856de9523041766cffcf9b77_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 512B - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 181KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��Ş Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ