Behavioral task
behavioral1
Sample
8894c9fd1384a17e159e365abf079fe3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8894c9fd1384a17e159e365abf079fe3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8894c9fd1384a17e159e365abf079fe3_JaffaCakes118
-
Size
79KB
-
MD5
8894c9fd1384a17e159e365abf079fe3
-
SHA1
d491eb65fb2733b760b71cb704f06f1f41a174f7
-
SHA256
b7f958240daa6287539df2d3e3be6963b8d202d900ea35f2ef6781c5472f9af6
-
SHA512
739f2b5fbfc56d0e0a1ccdc5a863563958490c432057118f1fd794d3d5b9df93e9b6b5499c03907c4a68dc6814d3f6a9836a67021e30c0d07d4ec42083b116ef
-
SSDEEP
1536:tSpy+6kaL2i/pYux+Xi9iSglewHGkuQgB3W5nQg7UPrO9ztrM:t0XSL2i/RT97KpHGrBmFf+rSdM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8894c9fd1384a17e159e365abf079fe3_JaffaCakes118
Files
-
8894c9fd1384a17e159e365abf079fe3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE