Behavioral task
behavioral1
Sample
0b9174dca31744fcc3d33e1a0022a6e6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0b9174dca31744fcc3d33e1a0022a6e6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0b9174dca31744fcc3d33e1a0022a6e6_JaffaCakes118
-
Size
114KB
-
MD5
0b9174dca31744fcc3d33e1a0022a6e6
-
SHA1
47f7c563cc3f7f525be123c0dd60dafa03a89657
-
SHA256
7c3a9a71d8ab56fadf0d0069f605655faa37aeca68a98d9abd3d2f0590822ba4
-
SHA512
198349a936d9b64e40ac1aad40e7fdbb4f9f79a5e1de7bbc28d024dd605c466f3eccb207e7718fe416ef069999a7e54f88a076d9b9efedb948ccb70be34cf27d
-
SSDEEP
3072:02oNUytwCZ3P6itmVVEC6/aPSmRPydcYcsX6rtrCpYFZ:0kk8YAjhLYc4K1CWZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b9174dca31744fcc3d33e1a0022a6e6_JaffaCakes118
Files
-
0b9174dca31744fcc3d33e1a0022a6e6_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 191KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE