Behavioral task
behavioral1
Sample
17b6be0f7ccb91dbfc168cbf6f835a42_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
17b6be0f7ccb91dbfc168cbf6f835a42_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
17b6be0f7ccb91dbfc168cbf6f835a42_JaffaCakes118
-
Size
3.4MB
-
MD5
17b6be0f7ccb91dbfc168cbf6f835a42
-
SHA1
9807949807821ff7a85a3f7e2c8fc33ef3b5f18f
-
SHA256
c29aee2feb6054dc5c726f5d1959094fffae3cedf1695ffe4e9f3dd598b98f0c
-
SHA512
1aba9bf03452f6f34f336df8f2344e95d90cf60a263a2bc58e2c7f375b6eb7c0d977abcc11d25c20bd617044f11342074170f9fc7272276531eed78ee7061e1f
-
SSDEEP
49152:b1rkf3jLHNrwpHO9k8ea8MXD/UrByvDQoGBSzh4RbZqewhRbKSQY:b143HCI+0stIQoRh4PqVhRbK6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17b6be0f7ccb91dbfc168cbf6f835a42_JaffaCakes118
Files
-
17b6be0f7ccb91dbfc168cbf6f835a42_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 816KB - Virtual size: 816KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 600KB - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE