Behavioral task
behavioral1
Sample
285f9ca1e96dc1419bbc8f8461116480_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
285f9ca1e96dc1419bbc8f8461116480_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
285f9ca1e96dc1419bbc8f8461116480_JaffaCakes118
-
Size
59KB
-
MD5
285f9ca1e96dc1419bbc8f8461116480
-
SHA1
fb627cde3ba05b887672f8f792f848b8c7b82384
-
SHA256
326eb9c4c13e02e06c3a0a3c1783f0c8adfe5d49dda70c6baaef47ed6a51156f
-
SHA512
783cdd72b438c8400cac18767189b7e7eb0f82e0ce6fc44afa07c84ee218897872f9d88af9e6a6617312f14b2d0fba1bc6d234bad03156b621e573c1b518dae7
-
SSDEEP
1536:9E/TIAZMoKAOPoFUuW7R/FwHYWK/HO3HabxZk0cP:e5ZMX/PoHW7R/+VwY6NvcP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 285f9ca1e96dc1419bbc8f8461116480_JaffaCakes118
Files
-
285f9ca1e96dc1419bbc8f8461116480_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 7.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE