Behavioral task
behavioral1
Sample
1aba9cde9707a893a104f0555a2c4ec1_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1aba9cde9707a893a104f0555a2c4ec1_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1aba9cde9707a893a104f0555a2c4ec1_JaffaCakes118
-
Size
861KB
-
MD5
1aba9cde9707a893a104f0555a2c4ec1
-
SHA1
c06909b7c83e76852d16245f5ca6c6db6c83d918
-
SHA256
d788c11c93207ee57ef4c2ecef8e90b3511054aa1bbb3071f88edcd40cd32f24
-
SHA512
3e567deb5cd47326844772621141deedbf4269605d8b55fbb09ef2d29d8569ebebb1a4d8f733d5b180f4bd87021685317712bbd87ab1615283b4e47c1d688e30
-
SSDEEP
24576:z5WMbDCZZQJETf/Uj6iJ6jhvhTQPmaIt:zET0GIj6EehpMuV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1aba9cde9707a893a104f0555a2c4ec1_JaffaCakes118
Files
-
1aba9cde9707a893a104f0555a2c4ec1_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 843KB - Virtual size: 844KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE