Behavioral task
behavioral1
Sample
79d48425fbd5c05ab7e49cedacb916ea_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
79d48425fbd5c05ab7e49cedacb916ea_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
79d48425fbd5c05ab7e49cedacb916ea_JaffaCakes118
-
Size
55KB
-
MD5
79d48425fbd5c05ab7e49cedacb916ea
-
SHA1
647a37318c02c7c4aac67bebf525c02e70372579
-
SHA256
b18eac2da5c6870c08cebd6127c398f6e28dc02b2446839539270a441c88f972
-
SHA512
cc0b7d38716c0663bdfb03084f265459fa105d528b90d3fbd71fc63809a213536f7181983ca5edfe1af3a3ed3e5f56234ae0d9a070e217d73d01fc7fb36d3c2f
-
SSDEEP
1536:TvwIMUkn5lRjATpx6GWT4T/ajc6Nr8RvtQMyV:7JknVKucT/u9yFtNyV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79d48425fbd5c05ab7e49cedacb916ea_JaffaCakes118
Files
-
79d48425fbd5c05ab7e49cedacb916ea_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE