Behavioral task
behavioral1
Sample
42bb07b14fc1c1e42cf9609758fa2153_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
42bb07b14fc1c1e42cf9609758fa2153_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
42bb07b14fc1c1e42cf9609758fa2153_JaffaCakes118
-
Size
9KB
-
MD5
42bb07b14fc1c1e42cf9609758fa2153
-
SHA1
c9a63230fd401cfbffa0993355ec20e2e1fa8714
-
SHA256
657589e763e1c143066b2354e6aee3df59b94a592ee51ccdd975b624ca1b19be
-
SHA512
7f7b5a3cb416db58d008389b5b5ef59acc86e8718a91f48adf9abbbb8211dc5c020301de97e1475cbfc85e34707772b77ddae2404ef98b349264bde2f7dd4e80
-
SSDEEP
192:26Ycxf7bCZtH6yktmb/s7voapNxMu0mue7K2qI2m+daGDrPJFu8H/cl9VyV0FmeG:GU+HAtmb/OpsHCaI2m47Pvu8fclmmFm1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42bb07b14fc1c1e42cf9609758fa2153_JaffaCakes118
Files
-
42bb07b14fc1c1e42cf9609758fa2153_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 244KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 209KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE