Behavioral task
behavioral1
Sample
87b90f5e154e53f894ab9903772e7906_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
87b90f5e154e53f894ab9903772e7906_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
87b90f5e154e53f894ab9903772e7906_JaffaCakes118
-
Size
864KB
-
MD5
87b90f5e154e53f894ab9903772e7906
-
SHA1
3b4c322247518dcab187219d5b1789cc47aa3fa7
-
SHA256
5b05b8b8ff4f3d914482866b6187e6b10992db770f0327c74d46f35afb7617f7
-
SHA512
ba4e895c81f03bda92a6673c4becf27e59e93014c1716ba7f250ed569d3bdac797ac0506ef303373cd9d7e1de815f9a235096ef728574418b56d40d430cbd9e0
-
SSDEEP
12288:3ZWtI6RkZBSerQZb+md4w1UOeZJys73dOvXDpNjNe8mPqu4:3uhaZBSerQZb+md4wmOeZJ8NI8ru4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87b90f5e154e53f894ab9903772e7906_JaffaCakes118
Files
-
87b90f5e154e53f894ab9903772e7906_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE