Behavioral task
behavioral1
Sample
1b1c26ef040a44b2f70231ac76f09c09_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1b1c26ef040a44b2f70231ac76f09c09_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1b1c26ef040a44b2f70231ac76f09c09_JaffaCakes118
-
Size
372KB
-
MD5
1b1c26ef040a44b2f70231ac76f09c09
-
SHA1
95262b8ba8c534f68acd5fdf4e2e4db2cce337ac
-
SHA256
2ab336e3a10076d8e8563a0d3ac1a17d002f2bad83d7205e98b40b0b2543a34f
-
SHA512
08aab5cfbaeec1255d27aa158564c90f0e30ce759d2f6acfddb17bae7b0e3841c310e11f5044c34f03ad85a088f9b1c16cbe2be89270a409756074767788eaab
-
SSDEEP
6144:/3UY9ForIRIkn4rl/zZv6CSBQJG6JIif3dzv8F1m3viPsAumDlCBf8nK6MEr:/3P9FormIk45txSWJpJdJEm/iPsAuClw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b1c26ef040a44b2f70231ac76f09c09_JaffaCakes118
Files
-
1b1c26ef040a44b2f70231ac76f09c09_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 361KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE