Behavioral task
behavioral1
Sample
628984e89db4ad72e4f2917dabcad65f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
628984e89db4ad72e4f2917dabcad65f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
628984e89db4ad72e4f2917dabcad65f_JaffaCakes118
-
Size
452KB
-
MD5
628984e89db4ad72e4f2917dabcad65f
-
SHA1
3999cbf7a7fa7910720989372dca3d134ac8f9af
-
SHA256
a24bf73444b35cb8cd505d7b46ec013d37848fed346eb2e36ef69e13107cc85a
-
SHA512
51cb14e5f9a9368acae24e2ca79f16cf3f506d9e9be731fd9bfa690e9cdaeeab9b6833f7f565ae3c373a5f361a4df60f4400475ceed832f3926fb6c10f887ff8
-
SSDEEP
3072:1FUy5+hXqFQmOAUpgB0An4vxf5F8mpafj/pHv1QcQxr/nnGIxIkjkpPvUIZby1El:1Y76DOkpXUfESko399LYmsT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 628984e89db4ad72e4f2917dabcad65f_JaffaCakes118
Files
-
628984e89db4ad72e4f2917dabcad65f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 109KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE