Behavioral task
behavioral1
Sample
8867639ad305956889ea873c305a7900_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8867639ad305956889ea873c305a7900_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8867639ad305956889ea873c305a7900_JaffaCakes118
-
Size
344KB
-
MD5
8867639ad305956889ea873c305a7900
-
SHA1
6a02eb42d969fa79411cbcbd42c8a7c6b42d2163
-
SHA256
b611f7ac04ff7b690a70c93b358be239c3fa52dfa9f12b2046630b68055eed23
-
SHA512
772bb5b63733b8b320f134d0ad75224119595dc63c4f501d6ea785c04e7ad9f7f1949c342c0618968417f74beca0908bf23637c00355f46818ebba3b879510f3
-
SSDEEP
768:CmeqvQ3GFXvuHzrSFL7NLtGMYoaftg4CBA2OejXRAnP4AHac+6axhha5+:xeqvQ3WciL76Jft9CG2DLRAFep
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8867639ad305956889ea873c305a7900_JaffaCakes118
Files
-
8867639ad305956889ea873c305a7900_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE