Behavioral task
behavioral1
Sample
428706ba3a61f4d6c6afe7fee570be26_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
428706ba3a61f4d6c6afe7fee570be26_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
428706ba3a61f4d6c6afe7fee570be26_JaffaCakes118
-
Size
178KB
-
MD5
428706ba3a61f4d6c6afe7fee570be26
-
SHA1
07b1794fbb80fe2c75fcfb17daa526032456d9d5
-
SHA256
2f23946cfc3765daa50f8fb4489ed0522ca2ddf4d362182b3a92b9a20321981a
-
SHA512
c357829c333cc8a414f80827cce73053f1d129aafd3bf82f0956a717ade676ac3587306134efd698d9b4fd52887ec3d89755d93651befba12146613c1798dceb
-
SSDEEP
3072:U29xzP53PWwnzelxEA8raSDADeak7dJHB/AK7d8:tF/RerEA8eSsQLH5AG8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 428706ba3a61f4d6c6afe7fee570be26_JaffaCakes118
Files
-
428706ba3a61f4d6c6afe7fee570be26_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uuu9 Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ