Behavioral task
behavioral1
Sample
33bde25756dae8d0b8e5d4937125689f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
33bde25756dae8d0b8e5d4937125689f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
33bde25756dae8d0b8e5d4937125689f_JaffaCakes118
-
Size
655KB
-
MD5
33bde25756dae8d0b8e5d4937125689f
-
SHA1
1e14a0d19ef994c89ead2c539be4eb7965448e16
-
SHA256
ae4f14d5c728951bf4e017d003c75cef3749c343d11c3db5fff349da614de5cf
-
SHA512
353decd9ec01b944f4ebf32477320a16d44b33c84e9fed757bc21993a8a7672e093d3034538a80b00b5ea123086cf32e5c1a16d27f5ffabbf0ee4144f2f47e2e
-
SSDEEP
6144:NLYhDCuUvDGeF+iIKXZhplp4nzFfpuCEs/rFbjOOH7d8r9:NEVCfG+IeleBx/pbjpH7d85
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33bde25756dae8d0b8e5d4937125689f_JaffaCakes118
Files
-
33bde25756dae8d0b8e5d4937125689f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 340KB - Virtual size: 340KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE