Behavioral task
behavioral1
Sample
87b4da4c29e27009cfd8d02c7acb5ef8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
87b4da4c29e27009cfd8d02c7acb5ef8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
87b4da4c29e27009cfd8d02c7acb5ef8_JaffaCakes118
-
Size
75KB
-
MD5
87b4da4c29e27009cfd8d02c7acb5ef8
-
SHA1
a1962dbaa2c06f2ebc874769044b637d4d416a6c
-
SHA256
7d76f364cfcab1f978c79f64d89b7ca671c78e371402fef4496e8f143cb2e8fc
-
SHA512
c745f3747f5b59367288a51e3b62d99d1479a9c56d96e3dd2cfe5a87f4a8a8dcfd2df8eac731bbcd89d1437351322c26e39fb094266f23d5b02ac1877a51ee7b
-
SSDEEP
1536:UZ4oWWRjRXVCiMmF6htxVXvTX7Eu4ttBTDws237KVN2ZqVk69l:mWWD3F67rXou4nBTh4ok6T
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87b4da4c29e27009cfd8d02c7acb5ef8_JaffaCakes118
Files
-
87b4da4c29e27009cfd8d02c7acb5ef8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 12.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE