Behavioral task
behavioral1
Sample
292ef81513d8964b6c84ff42e2c77dff_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
292ef81513d8964b6c84ff42e2c77dff_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
292ef81513d8964b6c84ff42e2c77dff_JaffaCakes118
-
Size
499KB
-
MD5
292ef81513d8964b6c84ff42e2c77dff
-
SHA1
ece3920d7970b84a6a340599a21ac59c7d764413
-
SHA256
5f73e6ea1dfecf9778e2368a3d61aa4c46b6fcb74a6b71c445a1ee90bc03ff6c
-
SHA512
b25ceea95ece8b23164223fbc2bf5bd491e035550f81bcd946abd0ab87ab953738582fb2799ecbd150d6308a813f770177548b29be2a1855c835419fb5800ed4
-
SSDEEP
12288:BYfS2tD+qLRguwPL9+Clb4NJuHmjVpcwYh4mtiF6bRQ:BYfSySqLtsL7b4NkmjMRsF6bRQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 292ef81513d8964b6c84ff42e2c77dff_JaffaCakes118
Files
-
292ef81513d8964b6c84ff42e2c77dff_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 628KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 491KB - Virtual size: 492KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE