Behavioral task
behavioral1
Sample
197e78d46bcdd64861f72e880d1567e9_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
197e78d46bcdd64861f72e880d1567e9_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
197e78d46bcdd64861f72e880d1567e9_JaffaCakes118
-
Size
359KB
-
MD5
197e78d46bcdd64861f72e880d1567e9
-
SHA1
7d722f5d3bdf6347553543eb928b81c81fffdeb3
-
SHA256
2d7f7307807611d6582f7010dcead1c056883e22633a485e83aa902ead6bafe6
-
SHA512
8887b9481759e59488789ae2bea943d70a882a83f79949d2f6e108e3a8dd67a1c8c46f321b617c012eba9949be2ee4da5e81d6ab6eca0d38f3a282f4f2810039
-
SSDEEP
6144:ZgRyiIWQFpUv4/B+FrM144XlzKlUAzYYbuewX79GtPuB8PxwPh79i5s/CoS9iP6M:3iMCv45+uK4VKXknewr9GBY85wPTi5sD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 197e78d46bcdd64861f72e880d1567e9_JaffaCakes118
Files
-
197e78d46bcdd64861f72e880d1567e9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 712KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 318KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE