Behavioral task
behavioral1
Sample
102578ff73ee93c6bef8212a99f70639_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
102578ff73ee93c6bef8212a99f70639_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
102578ff73ee93c6bef8212a99f70639_JaffaCakes118
-
Size
27KB
-
MD5
102578ff73ee93c6bef8212a99f70639
-
SHA1
0af1c0e18309e3fe23682600ee571007b45abbac
-
SHA256
c808248ec0df0e635e6929551256dc05c6878cd523fb7ae38ca6157de27ea0d7
-
SHA512
7d801f23d807c8c16c092413d8731199fe095babf2a7ded5931d50150e57f711408fe4626655980e5692ad484e93dee8a678de3989dff80841a1c22312daa2cf
-
SSDEEP
768:AzMTZh36nbcuyD7UPGSathZyaSTpgDfD:cMHqnouy8PGSAJQ0fD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 102578ff73ee93c6bef8212a99f70639_JaffaCakes118
Files
-
102578ff73ee93c6bef8212a99f70639_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE