Behavioral task
behavioral1
Sample
d139a1eb81bf2ddc809085cb5c1c2d93_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
d139a1eb81bf2ddc809085cb5c1c2d93_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
d139a1eb81bf2ddc809085cb5c1c2d93_JaffaCakes118
-
Size
336KB
-
MD5
d139a1eb81bf2ddc809085cb5c1c2d93
-
SHA1
53136b762d214c91ee229d27e650100fbe2a7866
-
SHA256
629d9bfb0e12b7a45e9447a1b18028dd2b7a7a12e29645655046300b63e821ea
-
SHA512
d63616c193bb6767c99e6bbf175750ac320a3290a4f0003e8e3ef54386998186ae8faa38541838f30500448258b2a36c0f62d478f2ef2aa0f368fd3f40dff377
-
SSDEEP
3072:bSCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VEMQTy:bSqDAwl0xPTMiR9JSSxPUKg+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d139a1eb81bf2ddc809085cb5c1c2d93_JaffaCakes118
Files
-
d139a1eb81bf2ddc809085cb5c1c2d93_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 496KB - Virtual size: 496KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WyfXjeKf Size: 39KB - Virtual size: 39KB
gpgIMpmU Size: 27KB - Virtual size: 27KB
MuokDwbU Size: 33KB - Virtual size: 32KB
witGhwzf Size: 829KB - Virtual size: 828KB
uVjUTfua Size: 11KB - Virtual size: 11KB
dtAkXvHh Size: 27KB - Virtual size: 26KB
NUlQnaGz Size: 30KB - Virtual size: 29KB
rXKRIQdC Size: 45KB - Virtual size: 45KB
incSlTfU Size: 47KB - Virtual size: 47KB
hbXZsizA Size: 208KB - Virtual size: 207KB
QqORtjdf Size: 25KB - Virtual size: 25KB
nLLakwEl Size: 4KB - Virtual size: 3KB
ZiAAAuiM Size: 12KB - Virtual size: 11KB
bnhbBKPQ Size: 57KB - Virtual size: 56KB
ZVKlSNYu Size: 450KB - Virtual size: 450KB
VKdsGUSa Size: 13KB - Virtual size: 12KB
wNfUbpOr Size: 1024B - Virtual size: 565B
PpNfYTSm Size: 346KB - Virtual size: 346KB
wbctJzSL Size: 57KB - Virtual size: 57KB
KfUykNMr Size: 231KB - Virtual size: 231KB
auwUAqBL Size: 19KB - Virtual size: 18KB
lUzoytAq Size: 39KB - Virtual size: 39KB
rXrdarom Size: 1024B - Virtual size: 573B
lOaPfPou Size: 2KB - Virtual size: 1KB
GPMHQtcz Size: 19KB - Virtual size: 18KB
ULIuIuGD Size: 39KB - Virtual size: 38KB
bShjBJJg Size: 19KB - Virtual size: 18KB
gwANZwjw Size: 35KB - Virtual size: 35KB
QhrXJjbn Size: 2KB - Virtual size: 2KB
uuvQTpEa Size: 14KB - Virtual size: 14KB
lplqHnzX Size: 42KB - Virtual size: 42KB
CbUvvOpZ Size: 47KB - Virtual size: 47KB
TvUNyqSv Size: 67KB - Virtual size: 66KB
LrbuiVWt Size: 34KB - Virtual size: 33KB
lcuKTltR Size: 5KB - Virtual size: 5KB
pqcOfAzY Size: 21KB - Virtual size: 20KB
qFrvIMjz Size: 19KB - Virtual size: 19KB
RWpHZeRv Size: 145KB - Virtual size: 144KB
DTquBqsn Size: 145KB - Virtual size: 144KB
iEhrZIuN Size: 84KB - Virtual size: 83KB
tMMbkYbT Size: 55KB - Virtual size: 55KB
BPwWeRZC Size: 68KB - Virtual size: 68KB
nKLLBRGC Size: 35KB - Virtual size: 34KB
WdOUPLkw Size: 53KB - Virtual size: 52KB
mxSXDnsn Size: 100KB - Virtual size: 99KB
FXNHjuld Size: 50KB - Virtual size: 50KB
NTbNPIPi Size: 8KB - Virtual size: 8KB
XHUiKhKy Size: 19KB - Virtual size: 19KB
vUCoKnki Size: 250KB - Virtual size: 249KB
tCpXgUCM Size: 1KB - Virtual size: 1KB
cwlzJpCI Size: 12KB - Virtual size: 12KB
ZZSvZfuw Size: 20KB - Virtual size: 19KB
ltwNBoAc Size: 46KB - Virtual size: 46KB
cwVnYsIc Size: 4KB - Virtual size: 4KB
lzsoKFhO Size: 38KB - Virtual size: 37KB
HkCKhjyG Size: 1KB - Virtual size: 1KB
SBJDCOlU Size: 45KB - Virtual size: 45KB
kDwwmHwU Size: 8KB - Virtual size: 8KB
irIRjJFE Size: 37KB - Virtual size: 37KB
ynxAEOPA Size: 2KB - Virtual size: 2KB
MkNasyVW Size: 6KB - Virtual size: 5KB
YbiPdejF Size: 1KB - Virtual size: 1KB
hDqTQJyq Size: 58KB - Virtual size: 58KB
BHGYRtOv Size: 37KB - Virtual size: 37KB
WsoVapwW Size: 24KB - Virtual size: 24KB
eyiJNCMd Size: 13KB - Virtual size: 13KB
RuZWchxv Size: 3KB - Virtual size: 3KB