Behavioral task
behavioral1
Sample
307aa08f02c1564b64806ea2f4eb36fb_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
307aa08f02c1564b64806ea2f4eb36fb_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
307aa08f02c1564b64806ea2f4eb36fb_JaffaCakes118
-
Size
206KB
-
MD5
307aa08f02c1564b64806ea2f4eb36fb
-
SHA1
8f365c3c8e997eebf0da1bd3cc93b2ff41267781
-
SHA256
e8ff66af2e5f697ac1329bb0f478b04f8e0980563e02adf6538752e17f7ec29e
-
SHA512
18c6bc756c28d4061eef1d4bf2a96b072259e457485457b9e0b011b8ea862bc7d2bf6f7f9097af560118ebf9f36a1ad17349d0ce5859f147864099e337e17c08
-
SSDEEP
3072:lDCuZBl4kQZbXQRH2mlj7ud7s01D3nCYrFSmLJ/p:lDCs45Zb2WW6dY0JXCYci
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 307aa08f02c1564b64806ea2f4eb36fb_JaffaCakes118
Files
-
307aa08f02c1564b64806ea2f4eb36fb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE