Behavioral task
behavioral1
Sample
299070f4c8a981fae7b4243d591ffc36_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
299070f4c8a981fae7b4243d591ffc36_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
299070f4c8a981fae7b4243d591ffc36_JaffaCakes118
-
Size
1.8MB
-
MD5
299070f4c8a981fae7b4243d591ffc36
-
SHA1
7a16139c249e4043921c5e6c6042c8e2839fceaf
-
SHA256
08e36b6f387127f515f8f62b363669ac1c6c4b1d6663340c53b604943214434f
-
SHA512
f655e737ad61799d17e1adad5a10aed4b0c5ec0dd8e8989c318a444d7f4984da42fb5d1ee930b54f87f79606eab8ea063c10383e7181abb0b92f1704c505d281
-
SSDEEP
24576:3uhaBeZJ8NI8zyOTeZJ8NI8zyOTeZJ8NI8zyO7oj2O9E:YT888887oju
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 299070f4c8a981fae7b4243d591ffc36_JaffaCakes118
Files
-
299070f4c8a981fae7b4243d591ffc36_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE