Behavioral task
behavioral1
Sample
702a82db149878eaac653130f1fa681a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
702a82db149878eaac653130f1fa681a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
702a82db149878eaac653130f1fa681a_JaffaCakes118
-
Size
18KB
-
MD5
702a82db149878eaac653130f1fa681a
-
SHA1
0b0c8ecf747e26f7925c8b5aabd13e97e002c554
-
SHA256
44d87f47f24c5ec510c7d62a7ff82c300ee064a8d64dc45546615d4292bcda20
-
SHA512
8fcea5161191af65e9db0417fa0f7a772e68bea4b6fe26290cb66b6314e6450ccb2f27c0c117e4912586f405e3a5fa4a01f824154997b932288a35df4ad579cf
-
SSDEEP
384:Yfei9G/iEEDXE1sZr7DCTVdgNGHiHZnKZy3l2JVb1AV+1A04T:iEgE+ZrvCfgRHZKo1mVZ2+1ET
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 702a82db149878eaac653130f1fa681a_JaffaCakes118
Files
-
702a82db149878eaac653130f1fa681a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE