Behavioral task
behavioral1
Sample
7207700b8138b613772b48af6e1efbc6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7207700b8138b613772b48af6e1efbc6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7207700b8138b613772b48af6e1efbc6_JaffaCakes118
-
Size
105KB
-
MD5
7207700b8138b613772b48af6e1efbc6
-
SHA1
47ea336258ab1202402b4ba63c54b70389d38748
-
SHA256
a39f6b91ceb1171ec55e5429a7fe0c6eeaf6395059c1ba0c65de63e513f80ba6
-
SHA512
b2c098126f4e0cc25c4b0284766e86119934105a3d6e266f82009e5205eeafb060161e39b958425eb304c28c468daa8509dc7a0baed4fe007f7d64c20d28913c
-
SSDEEP
3072:E+CjIRVzUm1C1vHgSvJ4aC74lx2N1JPWpiGWaSsW:E+CjIc/vvJ7OJ6lSsW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7207700b8138b613772b48af6e1efbc6_JaffaCakes118
Files
-
7207700b8138b613772b48af6e1efbc6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 900KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 740KB - Virtual size: 744KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE