Behavioral task
behavioral1
Sample
184bed038b87bde3d98bb62f6d59abb0_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
184bed038b87bde3d98bb62f6d59abb0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
184bed038b87bde3d98bb62f6d59abb0_JaffaCakes118
-
Size
529KB
-
MD5
184bed038b87bde3d98bb62f6d59abb0
-
SHA1
5aca37660c5c31f9eac111b4b04ca1776f080ed7
-
SHA256
9bc368f71bd39b446db6e1707234c45d8ac498a41f95b0de31b956cf591c84ea
-
SHA512
96abaef4ae9f32e0583effa5806518b7321824cfc089f659b2286778a8b69214fac4c1f8a2ab0c835c91dac787c12ffededa280c6201b4625b481d1b4e8810e6
-
SSDEEP
12288:GcV7q2kM8jQfMjwb+QDwrm3sXzFWDfw8GZDeoTzy4rWP1W4AV1qp:FF8j9uFsXLDeyyKE1W5qp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 184bed038b87bde3d98bb62f6d59abb0_JaffaCakes118
Files
-
184bed038b87bde3d98bb62f6d59abb0_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 604KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 396KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE