Behavioral task
behavioral1
Sample
1af6d81842be4e85a0ca3ab847aa9b46_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1af6d81842be4e85a0ca3ab847aa9b46_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1af6d81842be4e85a0ca3ab847aa9b46_JaffaCakes118
-
Size
448KB
-
MD5
1af6d81842be4e85a0ca3ab847aa9b46
-
SHA1
42e19df623b098ae27edc7ddda094e9b4bdcd473
-
SHA256
2bad087c9fdc55942881684f5bd955a65f942f858c91c8b4e77c905c856578c6
-
SHA512
c6635f58ce21342ec7c75921e43bb600bf70ba600ce4be1487a3914f9f18b27b3d45ea1dccba436214ce58ef42538961392fc4763168b4c7a57813ac0f9c19a2
-
SSDEEP
6144:GWZfec9EbXDk6RkQKRXl+lXDZJfLufs73dOk0XDpNjNOpys8mnmy+g4H:3ZWtI6RkrXeZJys73dOvXDpNjNe8m2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1af6d81842be4e85a0ca3ab847aa9b46_JaffaCakes118
Files
-
1af6d81842be4e85a0ca3ab847aa9b46_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE