Behavioral task
behavioral1
Sample
075a67331d63fcab78becd9396242fe9_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
075a67331d63fcab78becd9396242fe9_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
075a67331d63fcab78becd9396242fe9_JaffaCakes118
-
Size
162KB
-
MD5
075a67331d63fcab78becd9396242fe9
-
SHA1
e0b718f442c2ad77e1e1a888efbd6953824efce8
-
SHA256
ad86575ecf7db840de1c0d151e48d6980ced2c51c5e131404a2e371ad5f7f764
-
SHA512
6dce925e69188aa11909d490a87ff665e8ac1e3481f895f83d45d03720ca197de45b6923024fe4f623c12f938166476cddb40f0b2acd42e90fdb55473a0882b5
-
SSDEEP
3072:mLv4bV8Hr3KQeFBts2OxFrYNeCYeUm20f6fq5liRrBrAcAqq2Xout40/TSq:ms46Q96NI4/lSVrXi2XoS42p
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 075a67331d63fcab78becd9396242fe9_JaffaCakes118
Files
-
075a67331d63fcab78becd9396242fe9_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 157KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE