Behavioral task
behavioral1
Sample
28e9adca6e3572b3a68c544a12cd320e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
28e9adca6e3572b3a68c544a12cd320e_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
28e9adca6e3572b3a68c544a12cd320e_JaffaCakes118
-
Size
644KB
-
MD5
28e9adca6e3572b3a68c544a12cd320e
-
SHA1
f978acbc0f661919db38f9e3cbab04aeec7c6f86
-
SHA256
4929815df51b428d288e560763ed0ff44e0c3b63e6041e0e4612544e6a761f34
-
SHA512
fc41fc071408fcec22acba32da02c6e723ec752e8aece01dd6009f46b63be92fbfd65ce4539f04d69c4b69f7a74a9afba9504890d54a223060d0b05a3da72832
-
SSDEEP
12288:Jq9lDIfQTBneTi68dXTBYn7ZwYuhQf/eOZ4fs/FXZDNhX0ZZVBq3FI:JmpIfQVemh7QpuhQneOZY8FXZhhsZV2u
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28e9adca6e3572b3a68c544a12cd320e_JaffaCakes118
Files
-
28e9adca6e3572b3a68c544a12cd320e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 3.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 18.3MB - Virtual size: 18.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE