Behavioral task
behavioral1
Sample
777fa2987432f5df1eeb2f242fb7ab29_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
777fa2987432f5df1eeb2f242fb7ab29_JaffaCakes118.exe
Resource
win10v2004-20240729-en
General
-
Target
777fa2987432f5df1eeb2f242fb7ab29_JaffaCakes118
-
Size
178KB
-
MD5
777fa2987432f5df1eeb2f242fb7ab29
-
SHA1
4645ba77b4db1535690281798fd81ee073745ebe
-
SHA256
c67c4e311e0ebdf96d6cd42742da8c2740f7206183d2ccbf42d50f4269e248d0
-
SHA512
05c6fc5c73f9c3b11c5e9d55204c6e1f8dd8aa17f9fbec40bddb783e084f41e393a589958eff0a9585f392c7a13dc2ec63d9a1f88ded1fc7a7374dc2e886073b
-
SSDEEP
3072:heFJo24KW+9gxsR/cCGLUB0vAGWx+T6Cj91fYsdnHM2g13DpkDGL:heFQKR2xwNGzvx3dnsj13dkDs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 777fa2987432f5df1eeb2f242fb7ab29_JaffaCakes118
Files
-
777fa2987432f5df1eeb2f242fb7ab29_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 312KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: - Virtual size: 176KB
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE