Behavioral task
behavioral1
Sample
75f274a6b2b1877df6290d850ddca243_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
75f274a6b2b1877df6290d850ddca243_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
75f274a6b2b1877df6290d850ddca243_JaffaCakes118
-
Size
392KB
-
MD5
75f274a6b2b1877df6290d850ddca243
-
SHA1
663a602d2da3e9f9cf69f7791b6aeb1ca663d8ed
-
SHA256
d136d266f0c49973a57e0739c949556998788083809979ef544206cc18a1f9b5
-
SHA512
4a7933283c97dceac304df3f49cf98e9d06c09292ece3c8258f5fbc5914209c15ced20b11e7e366404679c1284c4be53f3f4aae2182e2a639e7f4fa1f02e5999
-
SSDEEP
3072:ghrpI5bLOXRd2qrQrR+ATcxGOgIQB8oX9LjN8oDQS3HpcvPMGbXEUb/mTWQBhXvm:gzIJLOSbDOAHC3MOEU8ibnhPaa6Ap
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75f274a6b2b1877df6290d850ddca243_JaffaCakes118
Files
-
75f274a6b2b1877df6290d850ddca243_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 228KB - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 150KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE