Behavioral task
behavioral1
Sample
8806f61d58c3b25d7d90966393199f79_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8806f61d58c3b25d7d90966393199f79_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8806f61d58c3b25d7d90966393199f79_JaffaCakes118
-
Size
136KB
-
MD5
8806f61d58c3b25d7d90966393199f79
-
SHA1
fb8f72d5b1e82d6422499e87619fa72133459282
-
SHA256
668de24ce71bd9975eb73bad35a07479b59b09d9da4e6ae0ed2d7562266e708d
-
SHA512
c0fdb9d492730817c748fe62450e73b72e866ac9bad7fe459ef92b7d8fc4ea14c4357ad711d5be84531c65f20a5bbb8dff8409b93a4a1264ed8cafbcbbdb9554
-
SSDEEP
1536:CcZeysfWXyjzp5DB1XcRi2Lbx1YYf2QhnD2cPfWx9EYa9YbeGE1dPilWMwF7L:C2XSzptMfLrf2enD2Vx9ERuqpMy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8806f61d58c3b25d7d90966393199f79_JaffaCakes118
Files
-
8806f61d58c3b25d7d90966393199f79_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE