Behavioral task
behavioral1
Sample
0004cc7c67c77b183743519b047a9c31_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0004cc7c67c77b183743519b047a9c31_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0004cc7c67c77b183743519b047a9c31_JaffaCakes118
-
Size
26KB
-
MD5
0004cc7c67c77b183743519b047a9c31
-
SHA1
73e2a3cf7ba25149166019120e6b9743698de730
-
SHA256
c7d998f7bcb7f0e0b98b98e8b75e90cc4e4a8c174e908dacd726fe1da85ae904
-
SHA512
d6d07938089bd858b8dde4439165bc24841d7d6cad237a7c8a815d7c2651973e2631ed88ada7df90699d22c321c89a09d6fbc89384945334d692a736a69365ec
-
SSDEEP
384:b5+vBDp9LDoU5lVkUew3/dq5d5omL2pkOW9/e168:bUBDMU5hXE5tmDb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0004cc7c67c77b183743519b047a9c31_JaffaCakes118
Files
-
0004cc7c67c77b183743519b047a9c31_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE