Behavioral task
behavioral1
Sample
458f778bea586c6df1ab80c715d27fd3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
458f778bea586c6df1ab80c715d27fd3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
458f778bea586c6df1ab80c715d27fd3_JaffaCakes118
-
Size
298KB
-
MD5
458f778bea586c6df1ab80c715d27fd3
-
SHA1
ada5593141ba3ad3c67fd4337299ecf0c023a3e3
-
SHA256
74c9b531e918c244d4dfb3b1352be9f5e43e88e13e7db513c8cec00b3856b5a1
-
SHA512
dd9fb6d07a6a989d4c5d0dbf507a40b4cc6424ac6d39987faaf146b29ec61d3bef1c6a4f0e74bc451cd300fb55af58c4f0edc955a39ac4431bd347dad095a5ad
-
SSDEEP
6144:rxc2oixkmZnS94SmP2inZ2YBliUYkGHDGSI8Lv2gtoSI:rxc2XCmJSKl2iZ2miU6dI8Lv20oS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 458f778bea586c6df1ab80c715d27fd3_JaffaCakes118
Files
-
458f778bea586c6df1ab80c715d27fd3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 512KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 269KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE