Behavioral task
behavioral1
Sample
864bff07bafe194915a80b34d2977e26_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
864bff07bafe194915a80b34d2977e26_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
864bff07bafe194915a80b34d2977e26_JaffaCakes118
-
Size
857KB
-
MD5
864bff07bafe194915a80b34d2977e26
-
SHA1
7702410181b5f8a7ce29c577d55fac031242ce2a
-
SHA256
fec7dc816d1033bc438e6de3564ea20e1b5fbc58f8b48f37a23b69b1ec5f5920
-
SHA512
5e2fa192aafadbc951e5f82786be77fd62ac15e70b8e368fb93cdcef35ea0efa834724573d1f74bdf6661d9b30d061b600a7ad974ff00e0f9e22b420863c0752
-
SSDEEP
12288:YgY0VlAx5QodSQ8fc9OqnI9P3Vy888888888888W88888888888Lv4FbqaTQ7wYI:ZYWix5QodSQ8fc9PnIZ30vQbqDl4fqxy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 864bff07bafe194915a80b34d2977e26_JaffaCakes118
Files
-
864bff07bafe194915a80b34d2977e26_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 372KB - Virtual size: 372KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 372KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ultra Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ