Behavioral task
behavioral1
Sample
1c8313b93a204fb63efc5d81b0790c2e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1c8313b93a204fb63efc5d81b0790c2e_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1c8313b93a204fb63efc5d81b0790c2e_JaffaCakes118
-
Size
4.9MB
-
MD5
1c8313b93a204fb63efc5d81b0790c2e
-
SHA1
ba056262026fdc278772e65ca69ccbde878ad7bc
-
SHA256
12ef5fb53862ee172b085983ee7185b1b7a210f27f66e457f1da69785f0ac8fb
-
SHA512
bf2be0c29cc4b0114f6619b6f77e541bd98ffab2d72cdc01bae60acdb3bc0ca75597368919a7d32b2b2e090ab88a015225f85f2496d21ee2425912f083da8c6d
-
SSDEEP
98304:oRCtd3zqXkd8u7rx/KKJXNSYXDlIZG2XQ3wb+XurIRvneeyyCyyyZB:oU7zqXbu7rFKkIKFXg4vd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c8313b93a204fb63efc5d81b0790c2e_JaffaCakes118
Files
-
1c8313b93a204fb63efc5d81b0790c2e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.4MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 363KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE