Behavioral task
behavioral1
Sample
255ff74f0cc6a85eced78ee924dbe9b6_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
255ff74f0cc6a85eced78ee924dbe9b6_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
255ff74f0cc6a85eced78ee924dbe9b6_JaffaCakes118
-
Size
49KB
-
MD5
255ff74f0cc6a85eced78ee924dbe9b6
-
SHA1
4aee029e03964827b8b2d5eb667c859f3192e78d
-
SHA256
1b12901e179e6c51fa13abe53a4b16834f3e87baa5ec35086be8faff4645ad60
-
SHA512
05fb64f8df613447d9da8cf410831d423e5370b666a295eebc99b3db702ec743310eb4e7a9166111a59f2ed2021c5f9177be650b297d4d4eb823e5ebe0ae9950
-
SSDEEP
768:67Mqfg7u7qmyaXPaujVFUgLNYoVWC8OpWw5UumiaYnThRkzyb+cblFFgsQDc:67jITPVkVFUYNYo0lOj58LyrD3b2Nw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 255ff74f0cc6a85eced78ee924dbe9b6_JaffaCakes118
Files
-
255ff74f0cc6a85eced78ee924dbe9b6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE