Behavioral task
behavioral1
Sample
0a1d9e0e935574567ab973ff54c5013d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0a1d9e0e935574567ab973ff54c5013d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0a1d9e0e935574567ab973ff54c5013d_JaffaCakes118
-
Size
639KB
-
MD5
0a1d9e0e935574567ab973ff54c5013d
-
SHA1
c1cc471a91b5d811464c04219b6ba2927d39d158
-
SHA256
3964ab83339beaf73f77412f99dc0a3303353a921072b535ba1defdba30e79ce
-
SHA512
1ea23d97f6e0bb5bf01bf01c811d4b50350c6ed915ae01b5d3ff44215579c75b43f9bd97758b338106708986276bc2155f2982ca2895928b446dda2f1f394883
-
SSDEEP
12288:szcOb6bojmlgYvKLiRNdAa02tAGK8uGtffrgVxNOMfc33sUn6pxeTzpB:s7mdua02tAGK8rdULXc33mWpB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a1d9e0e935574567ab973ff54c5013d_JaffaCakes118
Files
-
0a1d9e0e935574567ab973ff54c5013d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 350KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 366KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE