Behavioral task
behavioral1
Sample
1c2c8d2fdfbb1dbf9f568999875a3004_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1c2c8d2fdfbb1dbf9f568999875a3004_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
1c2c8d2fdfbb1dbf9f568999875a3004_JaffaCakes118
-
Size
166KB
-
MD5
1c2c8d2fdfbb1dbf9f568999875a3004
-
SHA1
2d815706088e53729081117b4e218a6e7b6f1dc4
-
SHA256
13f79f74dac1b0e1ee21e668c9257d7b86bf8b62a8202adc4c18251438290135
-
SHA512
ddf4ab8b4608f73918634f4e9b4622295887e9817fe2affb662eedfb330e5a10ae8a1f6b6f85259ac6a0e02eeccf97eb9921b82b9c9cf2a778c66b3b0c7590ce
-
SSDEEP
3072:6J4C8U9p/uaRhels39lpKSllp+c8nY65c:6J40XRElmcSXMM6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c2c8d2fdfbb1dbf9f568999875a3004_JaffaCakes118
Files
-
1c2c8d2fdfbb1dbf9f568999875a3004_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE