Behavioral task
behavioral1
Sample
411051f00aeabbecf3ee93cc2127ae6e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
411051f00aeabbecf3ee93cc2127ae6e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
411051f00aeabbecf3ee93cc2127ae6e_JaffaCakes118
-
Size
62KB
-
MD5
411051f00aeabbecf3ee93cc2127ae6e
-
SHA1
ca004c14c34fb18f61a6be0dffd2cd0b79553482
-
SHA256
fe456a1e1d83603bfca9c877f8f2817e040e839bf62f03d5d2bc3a6ee7457711
-
SHA512
e3ee979577efaaf1ff3678b90c4ba62a8d1af5ef88a7c9bd32707558638bf96291d19f84b9a0f12a3e3ce62bae03f5638728457db2c194e908d4ad3ca9414df3
-
SSDEEP
1536:smlguXX8xNl69aFgrxeCtXSuX40v5CA3A8tmh762yuHdY:sm+0X8xDaaoxN1SuI0v5ZXJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 411051f00aeabbecf3ee93cc2127ae6e_JaffaCakes118
Files
-
411051f00aeabbecf3ee93cc2127ae6e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.UPX1 Size: 512B - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UPX1 Size: 61KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE