Behavioral task
behavioral1
Sample
759e1b6831a101e7ca0bb009a1784ac1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
759e1b6831a101e7ca0bb009a1784ac1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
759e1b6831a101e7ca0bb009a1784ac1_JaffaCakes118
-
Size
2.9MB
-
MD5
759e1b6831a101e7ca0bb009a1784ac1
-
SHA1
982bc69d6d56809d2149fd5b5508a7a4f2578aec
-
SHA256
10c2ac446c4b7fb5fcb58d11289998cc235e84a7d0585dc847010ee6924588ea
-
SHA512
628175cf8534ca8d7193bbfc69bd7f51fff459d6fe8ea1f4e7a146e5b3f0e155e3b1997f7cfdd2035dc515454ec5462d05f01ecf3095400f39882d38cf7630f5
-
SSDEEP
24576:3uhaVOA2eZJ8NI8NahcqmTWeieZlFHDUTQJ+V8tgJd8iFHDUT344HTFj:YM8NKcqCWzAVsQJ+V8tgJd8iVs344HTh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 759e1b6831a101e7ca0bb009a1784ac1_JaffaCakes118
Files
-
759e1b6831a101e7ca0bb009a1784ac1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE