Behavioral task
behavioral1
Sample
32f096ef2f4a7bf5a4e520d5f8c1fe38_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
32f096ef2f4a7bf5a4e520d5f8c1fe38_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
32f096ef2f4a7bf5a4e520d5f8c1fe38_JaffaCakes118
-
Size
416KB
-
MD5
32f096ef2f4a7bf5a4e520d5f8c1fe38
-
SHA1
f4b9752190e512fd214446ac7a5baff8e4b47364
-
SHA256
9067c8411d9138a24167da423db123d337bf7889e0d7f91bc8b46e4987bc5a78
-
SHA512
0134f5048c8347103c88b4bea88e519e53747a15a25b7707ed8f2ccf8d61eb54806ade46a4eae3125787aa1f8e98cb90d741743324434bb488109d1a3b16c02e
-
SSDEEP
12288:VQTJb5/4Pa8FasmEDELBU+BDH0ZU87tB2Xw3+NlcdKhe:6V/4PdFyQZP7tvO3cdKhe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32f096ef2f4a7bf5a4e520d5f8c1fe38_JaffaCakes118
Files
-
32f096ef2f4a7bf5a4e520d5f8c1fe38_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 892KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 392KB - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE