Behavioral task
behavioral1
Sample
33392208a00f4c0566d400862919cf76_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
33392208a00f4c0566d400862919cf76_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
33392208a00f4c0566d400862919cf76_JaffaCakes118
-
Size
45KB
-
MD5
33392208a00f4c0566d400862919cf76
-
SHA1
4cfbdf287109a91b887a6e88c69e0eb1c7c77986
-
SHA256
32d4f3729e7b665d2bb04ebe17f370dbe371125603ff749d22bed7d5380edb35
-
SHA512
42f968c9009658e787bb8cbc79f6c05ba4b9e3b2769635870d70f0af78043943e1dcfbd1c4b469eb8152721fda236675d34ddfe78929b78944f4ed0172b4ea37
-
SSDEEP
768:+7sT7rex5t25b7lkbR0iKF8ugVnQLtOK:+AeXt25b7lFKVY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33392208a00f4c0566d400862919cf76_JaffaCakes118
Files
-
33392208a00f4c0566d400862919cf76_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newIID Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE