Behavioral task
behavioral1
Sample
075c57d60c5eec5b17f06cb159fd0262_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
075c57d60c5eec5b17f06cb159fd0262_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
075c57d60c5eec5b17f06cb159fd0262_JaffaCakes118
-
Size
102KB
-
MD5
075c57d60c5eec5b17f06cb159fd0262
-
SHA1
babc9dbd2b25368cbd3881758e8aa8de0ade2d85
-
SHA256
5bc2fa9d991e617c8835f6652beffbf19153281185a050dd530926a07386113e
-
SHA512
0facde9494b97b5c8fcd343cfdb27ced9abd6e33265c31caf6c73f7527a37423391fb3c1f1802e0113c42b8af3ac59a8f8e67933d7bb1c086d6208a809cf45e0
-
SSDEEP
3072:XfapcAxLrOeBhx9Mk8dedYY+U0QYgPTJPQosfV:XSp3JKeBhxWHEYY+U5YgLWoQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 075c57d60c5eec5b17f06cb159fd0262_JaffaCakes118
Files
-
075c57d60c5eec5b17f06cb159fd0262_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE