Behavioral task
behavioral1
Sample
279aa15a0e3a690ce9f081deacc3d7df_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
279aa15a0e3a690ce9f081deacc3d7df_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
279aa15a0e3a690ce9f081deacc3d7df_JaffaCakes118
-
Size
443KB
-
MD5
279aa15a0e3a690ce9f081deacc3d7df
-
SHA1
64d7744264a3aca11a637adfe27cc07645850296
-
SHA256
9533800227186ed8e488d9c5213ca6746da196e3433835a3b1954afd6a65ca09
-
SHA512
22e4b016b27e926c7f8712049965da3b5785405883998829b6d56b19c444668c96412ad9c9c64700b15acc8be0da70082ff795cc82c9eaaaeaba242d70d4ebfb
-
SSDEEP
12288:/Aw3ELF1D3f0Nx/YuYb01odqAHieA3KyhuOQ13ywzLjnMmD4:4woFpqxQuYAWd3A3KyCRymLLMm0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 279aa15a0e3a690ce9f081deacc3d7df_JaffaCakes118
Files
-
279aa15a0e3a690ce9f081deacc3d7df_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 268KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 174KB - Virtual size: 174KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE