Behavioral task
behavioral1
Sample
ed726874de20a6d29c7cc79d30d56436_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ed726874de20a6d29c7cc79d30d56436_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ed726874de20a6d29c7cc79d30d56436_JaffaCakes118
-
Size
11.0MB
-
MD5
ed726874de20a6d29c7cc79d30d56436
-
SHA1
b2b4f79d8935a340b99f332a0875a93ba969bc07
-
SHA256
bbe59107f534e0e0ce9795c5a39330c7e9a4acec8f98b28f1043aea88f866f3f
-
SHA512
bff9f09eff9be6d114b45066788508b4eb349339f854e068571945f424b29f0722b55a81818aaaade29b37c059c9e260144d8e3f36b6478f66e5820b48482993
-
SSDEEP
98304:2RGFi/KL35mCckFR+vicS43/X/322fLPzUYrXgL35mCckFR+vicS43:NFi/Kl33FR+6cXfnzrHC33FR+6c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed726874de20a6d29c7cc79d30d56436_JaffaCakes118
Files
-
ed726874de20a6d29c7cc79d30d56436_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE