Behavioral task
behavioral1
Sample
415676decfa455ce8ac6cf8d7a622e6e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
415676decfa455ce8ac6cf8d7a622e6e_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
415676decfa455ce8ac6cf8d7a622e6e_JaffaCakes118
-
Size
449KB
-
MD5
415676decfa455ce8ac6cf8d7a622e6e
-
SHA1
d27bb0216fa4c14a67e70637e414f990afa85b9a
-
SHA256
5cd1f008bfe8352a97490bb5d1321b169c5b56f319266a202e58a394cce2727b
-
SHA512
bafe9281194dac87d56a00e18f03d31088b888c8aba7ebfa6fd697a13e682b5d681333cb41690f1ab8fc98be8c059e5d8568b4dda3d13cdef2943b5ff06fccd1
-
SSDEEP
3072:8SH5b76aBfS7EMS0Rj0YbBTHsolg2NBNK0ua74LTw0FwVfHHzOfY:x5yyfS7FSzog2N/K0MM0uVfHHL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 415676decfa455ce8ac6cf8d7a622e6e_JaffaCakes118
Files
-
415676decfa455ce8ac6cf8d7a622e6e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 117KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE