Behavioral task
behavioral1
Sample
754d38c02670161afc56c80668a2f082_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
754d38c02670161afc56c80668a2f082_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
754d38c02670161afc56c80668a2f082_JaffaCakes118
-
Size
553KB
-
MD5
754d38c02670161afc56c80668a2f082
-
SHA1
034b0abca6b588cc255626f0b59d0a75cc227acf
-
SHA256
550c773cd3b75fef95326297c6373ba856717a5e0d03e6f07c84271ac2637335
-
SHA512
e787db350e83b3a9df35f7206d3eaf8b21ee2a0136afd914bfb90f0ab38f27fb14e70b4ff6f789275bc7f5311db6507b85763180652de3b54fe21361de364a92
-
SSDEEP
12288:mmiAv20bNmBf13aoHMkJXglpBjKnzFO9wBoS:ViAv7bNmBftyr8FO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 754d38c02670161afc56c80668a2f082_JaffaCakes118
Files
-
754d38c02670161afc56c80668a2f082_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 549KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE