Behavioral task
behavioral1
Sample
84c2d42e59d98d3a2e9e69247f76bba4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
84c2d42e59d98d3a2e9e69247f76bba4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
84c2d42e59d98d3a2e9e69247f76bba4_JaffaCakes118
-
Size
9.9MB
-
MD5
84c2d42e59d98d3a2e9e69247f76bba4
-
SHA1
91a63011cfb1a950a7d8b612ff5f1bc7c118587c
-
SHA256
129908b6b1c8ed0507e2b806e65fcda435d84fa5a58d67b586369d302b23f7d9
-
SHA512
6ee66a3d4db84b0c7b7dc28ece253dbc705a554cd27bce30ae11e99094a92e67167fd736c2a04d44c810e4420ed6689c3f925b081029db457dde4afeca8bd807
-
SSDEEP
196608:i7effIPEsy58doQaTxLhQyZbIly38doQalArdfehQM2gsyVCQlXI1G8do8a888FR:i7effIPEsy58doQaTxLhQyZbIly38doW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84c2d42e59d98d3a2e9e69247f76bba4_JaffaCakes118
Files
-
84c2d42e59d98d3a2e9e69247f76bba4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE