Behavioral task
behavioral1
Sample
405c068b24d4f0f2d3de9ea983eee1db_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
405c068b24d4f0f2d3de9ea983eee1db_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
405c068b24d4f0f2d3de9ea983eee1db_JaffaCakes118
-
Size
3.8MB
-
MD5
405c068b24d4f0f2d3de9ea983eee1db
-
SHA1
fbca9191c18f9e8ae20ffc472e6dd1efb627773d
-
SHA256
0bcc85b9a65797668249783d6797032cc6ca1e18ccfc6bf86e6f63a300da5366
-
SHA512
17d1bb1614d6f18e383346acab98934fa43c2fdd281b09b12fedf49b3e46fb75b7ad3981745ee2581a5a193a97b4334bdeff233c876178641a2b094c40030179
-
SSDEEP
49152:YZerQZbd2LerQZbd2LerQZbd2LerQZbd2LerQZbd2LerQZbd25y:VrQZZrQZZrQZZrQZZrQZZrQZV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 405c068b24d4f0f2d3de9ea983eee1db_JaffaCakes118
Files
-
405c068b24d4f0f2d3de9ea983eee1db_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE