Behavioral task
behavioral1
Sample
682fc256857dbe89fcca5dcdd111c932_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
682fc256857dbe89fcca5dcdd111c932_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
682fc256857dbe89fcca5dcdd111c932_JaffaCakes118
-
Size
128KB
-
MD5
682fc256857dbe89fcca5dcdd111c932
-
SHA1
c09f5185de83f4cea7460c0be486102a39a91e23
-
SHA256
2f7a868483e0bd42908640d7d5f64dae96a958c7bb3737c341606166ba9989fe
-
SHA512
f9eb9ab28b1c92cceaa3f518c79dcc96427f0cb4fd4323b4d94c71bb80f11fac51e6f32d8f6c0425b722f1d82f069d9d113c62999a0d69e6cd0940f24db853f5
-
SSDEEP
3072:brDyYxY7rZSIsvnPBhyz957WMHsqOnjVc+qDjrhZz0QEZk/Y:brDJa7rspPBcndOjm+qzLzIkg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 682fc256857dbe89fcca5dcdd111c932_JaffaCakes118
Files
-
682fc256857dbe89fcca5dcdd111c932_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 340KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE