Behavioral task
behavioral1
Sample
35f728ec29bd7844bb8c1bca7b9bb97d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
35f728ec29bd7844bb8c1bca7b9bb97d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
35f728ec29bd7844bb8c1bca7b9bb97d_JaffaCakes118
-
Size
154KB
-
MD5
35f728ec29bd7844bb8c1bca7b9bb97d
-
SHA1
dd1461954f00cc21068dfcc6f0216c3c2ed66091
-
SHA256
75ef479a171f65bb97e3c64c4f3d2b14ac6a99a0fcd1aa0c2fa816837bb81295
-
SHA512
b04e04a645d427a0c00e45e0c5f8ed4c19c226a9598e1a8247af12461020adc71997b832601c47dcc2430de0af45a2c808c287760a86bebd1f6db07a464916e4
-
SSDEEP
3072:vRoFSBmYYJys3OSZNNn2O0O4Cs/x+CNjEtt2wgrOEq68kjOMb8douv0b:ZoFE+Jrn7EOIx+yEttRaq68PMIdoEA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35f728ec29bd7844bb8c1bca7b9bb97d_JaffaCakes118
Files
-
35f728ec29bd7844bb8c1bca7b9bb97d_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 151KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE