Behavioral task
behavioral1
Sample
726fb89b51fe43209cf21176a4714b95_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
726fb89b51fe43209cf21176a4714b95_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
726fb89b51fe43209cf21176a4714b95_JaffaCakes118
-
Size
169KB
-
MD5
726fb89b51fe43209cf21176a4714b95
-
SHA1
820272f232eda4ece2088336150daa5b01eb3d83
-
SHA256
980510006ccb12557f4f8372d582903ed01a6707651651fb485dad125f9fcba8
-
SHA512
09f561f48198c34389a685bb87452d6b9493cca163add6c6cbc17e05840de04a532698b2bed79157570ac2b838d677b9a4294d08f6e8eaef04176dc8979580e1
-
SSDEEP
3072:jNe7zMFH8tLvCS/DCgf/I6j6YoabzbXJW77nmCKFwsGBpIyaNVv:jNesFH8R/egfzdoeenylG7sVv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 726fb89b51fe43209cf21176a4714b95_JaffaCakes118
Files
-
726fb89b51fe43209cf21176a4714b95_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 321KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE