Behavioral task
behavioral1
Sample
04eaa2655bf6cfde3b4289db09eafdf0_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
04eaa2655bf6cfde3b4289db09eafdf0_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
04eaa2655bf6cfde3b4289db09eafdf0_JaffaCakes118
-
Size
242KB
-
MD5
04eaa2655bf6cfde3b4289db09eafdf0
-
SHA1
dd2134905c400fcd9dc42302ceca4389906edf9f
-
SHA256
adbc62c982d919025c6fbce52f6ff9628bf97c7aed82b917a591b417e9645014
-
SHA512
60f97f20299751f2c4c2f27f5b27272d840f7d0ebe30878346eb07ae8923095c66124d3dca5b2ee5b9c6be9ac4e86239b0a7918e2c061714a450af6393ce275b
-
SSDEEP
3072:KGd294PLdL47mZ6kdkLiMBz4004yLm70T7uIeQXS0eWatxR+v9TR92hvNoTfAwg2:b20BL47mZ6Gkm0VAXT7uWqxUt9QvEn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04eaa2655bf6cfde3b4289db09eafdf0_JaffaCakes118
Files
-
04eaa2655bf6cfde3b4289db09eafdf0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 404KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 237KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE