Behavioral task
behavioral1
Sample
54ec000c776557ef0e0d1c7c440d50d1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
54ec000c776557ef0e0d1c7c440d50d1_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
54ec000c776557ef0e0d1c7c440d50d1_JaffaCakes118
-
Size
313KB
-
MD5
54ec000c776557ef0e0d1c7c440d50d1
-
SHA1
460325d4f2d2a16576b7da98e6e86762774bd22e
-
SHA256
ba7a6bd1f2ea23ef187abed19c27de669f85dd82263ea5c9d7e685fb7f5642fd
-
SHA512
a1dbac143bdcabfd5a8b1f33d46c00b9f75290a356b2ed78955f172335366c288f41873bc09bfbbb2a30625c59a77947dd154270278b1d5cc2c6476df7b9cb9a
-
SSDEEP
6144:ZgtmseRv3mmWoiHA2BrxIVQD4PSvvse9m58JS/Th7hTR57lToY:ZgbeRfT989BrCVVsUWkTTNZlTf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54ec000c776557ef0e0d1c7c440d50d1_JaffaCakes118
Files
-
54ec000c776557ef0e0d1c7c440d50d1_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 784KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 701KB - Virtual size: 704KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE