Behavioral task
behavioral1
Sample
252ebd5e75ed5a90c7cabcf2e0dcffb1_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
252ebd5e75ed5a90c7cabcf2e0dcffb1_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
252ebd5e75ed5a90c7cabcf2e0dcffb1_JaffaCakes118
-
Size
724KB
-
MD5
252ebd5e75ed5a90c7cabcf2e0dcffb1
-
SHA1
53bc34529a921edbef5a76f658a2baf659248586
-
SHA256
af624ca8dcae6d01e55837cd04def4aa0f0fb3069af6baef1763a803263c0dc3
-
SHA512
72808f14a8bd1e84ccbc46bed0a87368b406f93a5944a568866e0e834b2e7acc0d466ee70b8e2b43e3d54be6919afc157056808390a777d999c22fd5112414bb
-
SSDEEP
12288:mLjJo626GH0M89ceA4IMOegaml6gzX1B38ADRF7q7+cPJAJYVMBrU7jUod:ko6MdmIRegLl6gzX1CM74BdGBU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 252ebd5e75ed5a90c7cabcf2e0dcffb1_JaffaCakes118
Files
-
252ebd5e75ed5a90c7cabcf2e0dcffb1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 687KB - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE