Behavioral task
behavioral1
Sample
79697fe5729d5b8e004064907aff4ae9_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
79697fe5729d5b8e004064907aff4ae9_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
79697fe5729d5b8e004064907aff4ae9_JaffaCakes118
-
Size
145KB
-
MD5
79697fe5729d5b8e004064907aff4ae9
-
SHA1
0764975df2f35bf01c7f868e201a99473feb4c10
-
SHA256
e3431923b4319675979fa4bf754b7279d11cdcf529db0aebc9ba42ea8369bd6b
-
SHA512
bf44281d52b332221b38fdf48c755caa7422e53fe479bcb2f74ae145763a9f5eacb71c5c1cb1a52a8c8b563c6fe70cc07f24d6244c45ba105cb62be01ea8d623
-
SSDEEP
3072:D1xW2eD0L/3Rb90ER4obvHxun4yOqWUwbFc5JB49ss+9U+v:D1XeIbrxuW3PeX+OB9Rv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79697fe5729d5b8e004064907aff4ae9_JaffaCakes118
Files
-
79697fe5729d5b8e004064907aff4ae9_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE