Behavioral task
behavioral1
Sample
1c49e0691905edc7387985c6228a9ba2_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1c49e0691905edc7387985c6228a9ba2_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
1c49e0691905edc7387985c6228a9ba2_JaffaCakes118
-
Size
110KB
-
MD5
1c49e0691905edc7387985c6228a9ba2
-
SHA1
71fb73a1cc3ae67e9e953395bb088b671bfe1924
-
SHA256
2d3da616e28923accbc18b1fdcae70ceb6b59995870797166245ece04280f2bf
-
SHA512
6de39794f3bb8c5f7649b050043d5f6311d30c04821bb1324f960c6655e9b8ce4542f56d1137a69ef5bef3c0e1b15489323ee2ef97c9c27497dbae84ccc89c1a
-
SSDEEP
3072:qA0O/ehJR9SP/ze15wImTHgoc2gMn28eGvKPpQ6kD:q9phmLeLjmTHgoc27J7CPiD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c49e0691905edc7387985c6228a9ba2_JaffaCakes118
Files
-
1c49e0691905edc7387985c6228a9ba2_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 139KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE