Behavioral task
behavioral1
Sample
1029e7e03b5dad26bad9cb10b997d9a8_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1029e7e03b5dad26bad9cb10b997d9a8_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1029e7e03b5dad26bad9cb10b997d9a8_JaffaCakes118
-
Size
835KB
-
MD5
1029e7e03b5dad26bad9cb10b997d9a8
-
SHA1
9171cb60b7a6ed963364ef62292ce6fdf348b021
-
SHA256
a1966e21b20edef4863287fcb3e61e0e145bcea7ff9ab785a159713b77cd7fc3
-
SHA512
d7a673fca9231f3c1bbb7ac463e8807f0283cb3099295b60e32ee86caf11214c88042102085065cb6f3f62ca58598a9b3417e38522be737419973cb9ef0c5c89
-
SSDEEP
24576:IHaMo6Ph90wNYwb7Fpkxsz+Kr4XatYysP+yU2m:IJZ9TYw7kxOjKjP+yU2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1029e7e03b5dad26bad9cb10b997d9a8_JaffaCakes118
Files
-
1029e7e03b5dad26bad9cb10b997d9a8_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 820KB - Virtual size: 824KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE