Behavioral task
behavioral1
Sample
70bee924a48c59aa2c53688f191cbe9d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
70bee924a48c59aa2c53688f191cbe9d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
70bee924a48c59aa2c53688f191cbe9d_JaffaCakes118
-
Size
382KB
-
MD5
70bee924a48c59aa2c53688f191cbe9d
-
SHA1
eb0a867619e288af0903138a0e5a4d2bdfff1dde
-
SHA256
2239ae6432c2a28c420a1473f16fa8b1c326ba7c0f0ff32fb0eb3b8d955aaecf
-
SHA512
b52c005016a9b61cf13b9b522c9adc9e7ebbd760f9d8d69604a86c5325d9af0afe4dd4460f6f3de6fb0b1dc5b4880a5c60447c288e9865bfc6b12dca0f6aefa0
-
SSDEEP
6144:k6ZgAgOVAVb5aHUC3aj455XwcbUZKHk01QWUBJohCmZwJOYOoCW9kzMqg5PQ5h3F:k6ZgA7Qb5gyjmXwJRfWU0hC5PfCfMhQh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70bee924a48c59aa2c53688f191cbe9d_JaffaCakes118
Files
-
70bee924a48c59aa2c53688f191cbe9d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 756KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 354KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WYCao Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ