Behavioral task
behavioral1
Sample
1c4c090a096d5980e33bfe3926b6f694_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1c4c090a096d5980e33bfe3926b6f694_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
1c4c090a096d5980e33bfe3926b6f694_JaffaCakes118
-
Size
1.0MB
-
MD5
1c4c090a096d5980e33bfe3926b6f694
-
SHA1
7e2cdf87e732b3b033ea98cb902fa1f8b6bae80a
-
SHA256
53f8711afed791abd9462fa572ef88667ad4a025f6bb4b2063fbc2686fbdcf4b
-
SHA512
24d3ee4225f19d87fceeff869b0c85377f2bc17c7d8b8054a7dd4a49456aad1a63b92c75b6f7eea03221e8cf9bf7e7059c0d84feeadab6a500a17ecabc76522a
-
SSDEEP
12288:iw/spgaVfR54mUuon4ua0vJ+PCVw7rGNrkty0fkhAEm3:2pg654pTt03ErmyFAp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c4c090a096d5980e33bfe3926b6f694_JaffaCakes118
Files
-
1c4c090a096d5980e33bfe3926b6f694_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 576KB - Virtual size: 576KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 160KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE