Static task
static1
Behavioral task
behavioral1
Sample
774febd7d931e13965396bf6fc543d85_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
774febd7d931e13965396bf6fc543d85_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
774febd7d931e13965396bf6fc543d85_JaffaCakes118
-
Size
276KB
-
MD5
774febd7d931e13965396bf6fc543d85
-
SHA1
f7a0cf099126c27e0bd28a72ae7732f3784f4219
-
SHA256
1e3ab08b898d902b684c59465e3f3f1fee36c3258390e166d6f42a7edb9e8ad2
-
SHA512
4019f7ddcfa10c9a4ded4e214e455cc8931542ba05f1a233dfb571c49aa9ea9f72b81ea7b069434c7aa6fe23024fdc11631f579ea70f13441788c66d97f16232
-
SSDEEP
6144:bf/J/Upa6RnFUZG4Y2JhsCRRMknRlB+yXYgDxnns1ZJY:rkHRnb4vC5kMvms1ZJY
Malware Config
Signatures
-
Patched UPX-packed file 1 IoCs
Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
resource yara_rule sample patched_upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 774febd7d931e13965396bf6fc543d85_JaffaCakes118
Files
-
774febd7d931e13965396bf6fc543d85_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 275KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE