Behavioral task
behavioral1
Sample
599d8927b9ee1b55c61973e28a21e9e7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
599d8927b9ee1b55c61973e28a21e9e7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
599d8927b9ee1b55c61973e28a21e9e7_JaffaCakes118
-
Size
603KB
-
MD5
599d8927b9ee1b55c61973e28a21e9e7
-
SHA1
dbb8967a0eb541a7034d20473f8d4b560a0677e8
-
SHA256
7d8760ca8774c5d3db4a750eb64196f7595957689eb283470e381e689f702b0f
-
SHA512
a29b594be86dc6d8ccf43fd92ebec22eecebaa30dedc2bb474fcce178f3f792955e3a04b3d1a461f55fc5e9b9c3eda6c2111cea510a529af26b43886b9671cb9
-
SSDEEP
12288:VMkBpyFVQBpQIdyQcfsduaXI9v3S888888888888W8888888888815jZjVtp:HBGCBpQIdyQcfsd/XI53sjVZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 599d8927b9ee1b55c61973e28a21e9e7_JaffaCakes118
Files
-
599d8927b9ee1b55c61973e28a21e9e7_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 372KB - Virtual size: 372KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 220KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE