Behavioral task
behavioral1
Sample
1ff8363f33c1e4c7ec2f1cf2b194e6a7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1ff8363f33c1e4c7ec2f1cf2b194e6a7_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
1ff8363f33c1e4c7ec2f1cf2b194e6a7_JaffaCakes118
-
Size
646KB
-
MD5
1ff8363f33c1e4c7ec2f1cf2b194e6a7
-
SHA1
99419c844a924bd19914c67f283092a56967bea1
-
SHA256
28e86ac0a6ce446ae32d90f8efb5e1b37751343446182cd000ca595ccfdd924b
-
SHA512
dd07cccec601a240b12d35171778c2acd2c87b9d29d21dc7e7e97fb48eb6f53a6235777f931e8ea96bea2941e37ff6e64f6003009dc1a26e5a6e207877fa5a8f
-
SSDEEP
12288:5NJ+8G4A4NjL50+qT9oS9In+U7kzEql8AZT7a4d14elpDFBnL6/WJLOagoS:5NJcKm/9oS9POkYBv4d1NTnLO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ff8363f33c1e4c7ec2f1cf2b194e6a7_JaffaCakes118
Files
-
1ff8363f33c1e4c7ec2f1cf2b194e6a7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 644KB - Virtual size: 648KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE