Behavioral task
behavioral1
Sample
7e7bc4b0185008657f96c6c77b7a7afc_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7e7bc4b0185008657f96c6c77b7a7afc_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
7e7bc4b0185008657f96c6c77b7a7afc_JaffaCakes118
-
Size
8.0MB
-
MD5
7e7bc4b0185008657f96c6c77b7a7afc
-
SHA1
1825eee37397eb1600a81226e2e161fc9fd1c368
-
SHA256
930d2795105a0a8ae03fc901c0bf916d7278f5972db0886cb2857fa532d986fb
-
SHA512
d24c78fc2f89f9042afde651f99ee15e875dd56ed7e65c5d7e3a44336f276b9f113094dc69d51239283215bdcb52a031d42ef455c4394d020ae164748555b3c3
-
SSDEEP
196608:ueSenCfYS+NkCZFZu9ypTSFzvXvsN4Dq9/kaeB/:ueSD7gZFZBIFzfO9Mau/
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
7e7bc4b0185008657f96c6c77b7a7afc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Code Sign
da:c6:65:4a:48:36:a0:c2Certificate
IssuerCN=WJ,OU=WJ INFORMATICA,O=WJ INFORMATICA,L=IJUI,ST=IJUI,C=BR,1.2.840.113549.1.9.1=#0c1c636f6e7461746f40776a696e666f726d61746963612e636f6d2e6272Not Before24/09/2015, 16:36Not After21/09/2025, 16:36SubjectCN=WJ,OU=WJ INFORMATICA,O=WJ INFORMATICA,L=IJUI,ST=IJUI,C=BR,1.2.840.113549.1.9.1=#0c1c636f6e7461746f40776a696e666f726d61746963612e636f6d2e6272e4:10:66:e0:aa:19:53:29:3e:7e:52:11:df:71:b4:2b:c6:10:99:7eSigner
Actual PE Digeste4:10:66:e0:aa:19:53:29:3e:7e:52:11:df:71:b4:2b:c6:10:99:7eDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 32.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7.9MB - Virtual size: 7.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 113KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE