Behavioral task
behavioral1
Sample
33501fade7aab3669a4de06c2bfffd40_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
33501fade7aab3669a4de06c2bfffd40_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
33501fade7aab3669a4de06c2bfffd40_JaffaCakes118
-
Size
82KB
-
MD5
33501fade7aab3669a4de06c2bfffd40
-
SHA1
60076f0db2aa3eeb071f77b057bec683b05ca65d
-
SHA256
1a17988ede4f30e1cb9e580e5528b7553db6da3ee3a35be4962222bcaa639f82
-
SHA512
f71e0f71d2ae92720157368ad5336b74b0a0e1dcbcea3b5980121423bd84444be22823283eebbedee5389b82c9f4e7b5df1381a63808eeaeeded0a7e44e5c19d
-
SSDEEP
1536:wxSyKw2/FY+40ZWU4DvsBMUKGTIiWk7GJIt/dZxM6cnWEnrWtI:wEI2tPlgDEBMUZt/hdhp0gI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33501fade7aab3669a4de06c2bfffd40_JaffaCakes118
Files
-
33501fade7aab3669a4de06c2bfffd40_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE