Behavioral task
behavioral1
Sample
087b24d500cb017ce9a89f7e5bfa2b28_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
087b24d500cb017ce9a89f7e5bfa2b28_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
087b24d500cb017ce9a89f7e5bfa2b28_JaffaCakes118
-
Size
164KB
-
MD5
087b24d500cb017ce9a89f7e5bfa2b28
-
SHA1
10435a20a074affdc77ab16beb987703f107b846
-
SHA256
678162c1a3c1a35a71c467c85eb9f7540a3313bc4f176e52c0b0a36689788851
-
SHA512
c565c7909d432f6dc48d5973be43838af804beef5ade2eacfb554dfc2f972df3ddf8f39767fe2b6c23ab62ced14879e61d5ccea9210135cd353db887b24e9fbd
-
SSDEEP
3072:xfqKqf6l6PuEJR3AMpCK/FEeIFiXv9cgXGl1a/ihGMdEXKRTRZinKBnO:lUf6l6nJBAMld/f9/k1ywEaRNZc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 087b24d500cb017ce9a89f7e5bfa2b28_JaffaCakes118
Files
-
087b24d500cb017ce9a89f7e5bfa2b28_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE