Behavioral task
behavioral1
Sample
287354e43ed8fd9d853d6d654cf27760_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
287354e43ed8fd9d853d6d654cf27760_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
287354e43ed8fd9d853d6d654cf27760_JaffaCakes118
-
Size
189KB
-
MD5
287354e43ed8fd9d853d6d654cf27760
-
SHA1
8ba75ecc9ddeaab416b3b1590d82407a1f882476
-
SHA256
8e1546e284426c06413fe14fd0d3c539b578505668de51c9d2ebea6f7bdb7915
-
SHA512
a985292b2c85e4097a7319aaf11248ea43ce46e78d2b125b2e13a5fd5c34c411f383fa8d95ad68ae1b94bb7919c29ba63601a48a713611b00c36529fd8f36a53
-
SSDEEP
3072:qDjI9UcnKC6zlI2gIk6rX+zO+j46ewvH1foQ1Ff1Czwa77VMeXbOMGw4:q8UcKCkj+FUzytPHCzwa1MerOMGn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 287354e43ed8fd9d853d6d654cf27760_JaffaCakes118
Files
-
287354e43ed8fd9d853d6d654cf27760_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.spm Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE