Behavioral task
behavioral1
Sample
a84b47adf13a3f630fb070501dd19906_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a84b47adf13a3f630fb070501dd19906_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
a84b47adf13a3f630fb070501dd19906_JaffaCakes118
-
Size
203KB
-
MD5
a84b47adf13a3f630fb070501dd19906
-
SHA1
c57b1ff6cd195f5959b32eb7c73ce64d2a5c705e
-
SHA256
28235fbbacb80604f5ee441bbb53d17d990c75646b05bacb98f3efa949af200f
-
SHA512
b8e3875d211dfb4e0846a723fc4f2725a513524c17d89f461cdf71c1b7de2fcc8b76c2d496ed93535978ea78c54bedf07b4d68dd3fe63d46d5552b3afd6295f8
-
SSDEEP
6144:KdtpFtuRUuXxHkJTpwSoSgrXliuTb1c2mXKHu27PYyvg8kAVt:KZFt6HETgVxTxcx6OCvrk8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a84b47adf13a3f630fb070501dd19906_JaffaCakes118
Files
-
a84b47adf13a3f630fb070501dd19906_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 880KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 200KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE