Behavioral task
behavioral1
Sample
7579b0fec5ba0710023facb70bbf91c1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7579b0fec5ba0710023facb70bbf91c1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7579b0fec5ba0710023facb70bbf91c1_JaffaCakes118
-
Size
2.6MB
-
MD5
7579b0fec5ba0710023facb70bbf91c1
-
SHA1
6d1b201ffbb5ab948f9e2015c3f7b36cc037335a
-
SHA256
bee1bb173c00d27f37f7f67551d3476ab6e34f4bec93d25d0ce616e6e69597b1
-
SHA512
f98a780a8a2fd07d468d9530f1e68065765c4d0e9ad90d64b174e5fdf01e0188d1b4a8438f8c1e0849600eb1f1b1789d89072775e1f9c572399b644f5e671be8
-
SSDEEP
49152:YB8NKT/yqCvL/r/R/wdhqCv+V8tgJd8lVJ9y9Eu:ca1P5odh1v+CgalJy99
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7579b0fec5ba0710023facb70bbf91c1_JaffaCakes118
Files
-
7579b0fec5ba0710023facb70bbf91c1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE