Behavioral task
behavioral1
Sample
886fb9fd4032db6494e481ac7498e44a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
886fb9fd4032db6494e481ac7498e44a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
886fb9fd4032db6494e481ac7498e44a_JaffaCakes118
-
Size
342KB
-
MD5
886fb9fd4032db6494e481ac7498e44a
-
SHA1
6007aeca2abd396c8bbe298f6798de3575e4c3fa
-
SHA256
b50d7e7425c9fe2420797a1cc0b322546abf23d6dc656e1046ec1f63eadbe6c5
-
SHA512
614f6b50a7e81688e778c63bf92cc5a7946a3fef96e4696490375195cf82d8537abbe4a9bfce00fc994c3e08b0afb1d776a2f56c3f6134cdde2d81827aa2827f
-
SSDEEP
6144:KRqmpp+amNOGokzLyM9tsLAitQo6tzOKkzIt8gKyfjxfR9D2j4yjWYbCyZ:CqmpplpGoGL3etQoMiXM8gxf/Sj4ypZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 886fb9fd4032db6494e481ac7498e44a_JaffaCakes118
Files
-
886fb9fd4032db6494e481ac7498e44a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 338KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE