Behavioral task
behavioral1
Sample
0d969747c6ea0e42c39b2a792b69b876_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
0d969747c6ea0e42c39b2a792b69b876_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0d969747c6ea0e42c39b2a792b69b876_JaffaCakes118
-
Size
59KB
-
MD5
0d969747c6ea0e42c39b2a792b69b876
-
SHA1
a17d7ddc45b232026541148c8dc4610d53194c45
-
SHA256
9f2715bf6bd835a3cbcf5ec4e53b880d313082f9b044333209ce54053d66f939
-
SHA512
0de50c16e2929ffbf05132cfbc3c1f6af30420577605c8e545de0ead44c29cf17663dcf2065e7f9d7a01a074fbdcb94a309425cfc6d40bcc40c1a8112f90d70f
-
SSDEEP
768:1oEEnLL6xnlUHejENUOaktPi4rcR1cXZwhlku7zJg6nitK1eudkEMQDwsbrQ4Xwo:q32bENUytQCZSk0i6itmeyfw4ICfNt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d969747c6ea0e42c39b2a792b69b876_JaffaCakes118
Files
-
0d969747c6ea0e42c39b2a792b69b876_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 190KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE