Behavioral task
behavioral1
Sample
0a96a0e4e7af471ba463e814a1213d62_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0a96a0e4e7af471ba463e814a1213d62_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0a96a0e4e7af471ba463e814a1213d62_JaffaCakes118
-
Size
146KB
-
MD5
0a96a0e4e7af471ba463e814a1213d62
-
SHA1
6a09f15dfacde75bdecd6e4beb3803a52a0de9e6
-
SHA256
bd1a05f2cc684b9823c509cdec7ad22724d36d871b1e98b5fa85102e4bfc8d34
-
SHA512
b36ea25e225e5e98ead231f041264f4ef890a50f429ab829b96320162d9172021c28675e0b39c4df3dab2691085a576615c485f4efb5c39deadb83963d70a6b2
-
SSDEEP
3072:Da3VJ+P/YKN4ZEx/mrcm9BuBx8uGZ/A8cEP2zdP5n7O:ua/6KxOcUBuBbGZ/5uF5n6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a96a0e4e7af471ba463e814a1213d62_JaffaCakes118
Files
-
0a96a0e4e7af471ba463e814a1213d62_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 332KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 228KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE