Behavioral task
behavioral1
Sample
75558dbc8fdd8a82c2385b86bbf04a4c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
75558dbc8fdd8a82c2385b86bbf04a4c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
75558dbc8fdd8a82c2385b86bbf04a4c_JaffaCakes118
-
Size
169KB
-
MD5
75558dbc8fdd8a82c2385b86bbf04a4c
-
SHA1
6709728f50e497dfd3c77f8549d2e795a5c8901c
-
SHA256
54826dac588cb75393fc7bbaa5519ebdcf6c75cbe83e7138b1a1a88fc8d46c14
-
SHA512
6e354405309eefb495297e193577edad740e3d6c79d46ae2a66b91101f4f81b9fbff8f0b3a17c19e0208d02f410d35ca6c1e47a14c24f32a9261cfc30392cfec
-
SSDEEP
3072:E0oa4fWtMXepSKXhLlwbyXlO140xTEJ4YWvxR4gySk3CRffvfSBqv8wfNgfLout/:E00OtMJ+/asUPTgKxR4s8ojMLoS9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75558dbc8fdd8a82c2385b86bbf04a4c_JaffaCakes118
Files
-
75558dbc8fdd8a82c2385b86bbf04a4c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 160KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE