Behavioral task
behavioral1
Sample
1bf6e02ffc2b4ad136dce24f921f389f_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1bf6e02ffc2b4ad136dce24f921f389f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1bf6e02ffc2b4ad136dce24f921f389f_JaffaCakes118
-
Size
466KB
-
MD5
1bf6e02ffc2b4ad136dce24f921f389f
-
SHA1
55babc1682e85931fad061fd56e4674ac5075764
-
SHA256
910d3d8bf0eef1035c630e1abfec3ac79170749270d27f0ae651def29c8b6c03
-
SHA512
02c999320c036293ad5f590ecb74d27e7d7ccbf2b1bd2a44c0e1488ffd49a52dad27a1e7da7070e79aaef5ab1884e45caa860c00fe9c19bb4c9d3abdcd54f760
-
SSDEEP
12288:XWmKdg6d9Pcwd8kflV+ZEldHkDY2lidasrm/5oSUw:XWmcd9kwWEnHkkQivmIw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1bf6e02ffc2b4ad136dce24f921f389f_JaffaCakes118
Files
-
1bf6e02ffc2b4ad136dce24f921f389f_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 356KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 385KB - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE