Behavioral task
behavioral1
Sample
7a37d90460c12d820e2042bd88275b4e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7a37d90460c12d820e2042bd88275b4e_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
7a37d90460c12d820e2042bd88275b4e_JaffaCakes118
-
Size
113KB
-
MD5
7a37d90460c12d820e2042bd88275b4e
-
SHA1
067df1b087e6d8572a2371a694c21cac6a39c23a
-
SHA256
5af1621640e62fd3de8c47cb33b822f2060e044eddd23f8eb4d3dc6e3fe935ec
-
SHA512
643378b1d3da8f6c8ffd28ff1bff67ae334ed286fec617fd13635217b5111b0e4f217115f7dced6dde542656c27b454ad5b027c29c229695084ce71417b1fa44
-
SSDEEP
1536:HdfA/D3lRfA/D3lHOK1io6gJKZO4XdfA/D3lHOK1io6Y:9fIfpxVgJKE4NfpxVY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7a37d90460c12d820e2042bd88275b4e_JaffaCakes118
Files
-
7a37d90460c12d820e2042bd88275b4e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE