Behavioral task
behavioral1
Sample
59d5df4d58d1a8727b3f7137c6c97ecb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
59d5df4d58d1a8727b3f7137c6c97ecb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
59d5df4d58d1a8727b3f7137c6c97ecb_JaffaCakes118
-
Size
197KB
-
MD5
59d5df4d58d1a8727b3f7137c6c97ecb
-
SHA1
c436350228660f6cd2837f4970a464635f080988
-
SHA256
f920b60faad738215a8d543eed7e896e2bd195b13bea271d684ff17a03d5440f
-
SHA512
5b13e334860c0561789bbae80cee5ba523d71ec4e518dcfb4edf4e46f1a5b3d2e46ae5c0643a0f78a506192db46f5586f9b54e39e00751d1f0402b4cbe158a36
-
SSDEEP
6144:o4XwWIyfz7QLgKVKmYS4d+1KNYDdxbFnOlfJ/ugvImSRJ:o4NIyfQcxSy+1GYJxb90f8vb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59d5df4d58d1a8727b3f7137c6c97ecb_JaffaCakes118
Files
-
59d5df4d58d1a8727b3f7137c6c97ecb_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 194KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE