Behavioral task
behavioral1
Sample
88a0f23143d75a7fe26fd6868f419102_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
88a0f23143d75a7fe26fd6868f419102_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
88a0f23143d75a7fe26fd6868f419102_JaffaCakes118
-
Size
184KB
-
MD5
88a0f23143d75a7fe26fd6868f419102
-
SHA1
26fda0650769a04607540d8c61ddf001be751134
-
SHA256
48da206db8bdc420912cc613a58236affdceb0bf60f424a5e0ccc69b4704a2e9
-
SHA512
5763b58375798f2ca234f90fea05b06968e10b7b728da1a56dbcaf1293034c3fc4c0250d5dcf6fb8932ae25c75414cbf1249033d5c070b6aeb30a2ef915e1e60
-
SSDEEP
3072:dQutL6cy0w7+nw3Z9tI3Io7ntLcYtkQRnnUzp3iVo5SssMZwyBQAHQ/I8hOWxJ3U:uepy0M5J+IWtLcYth23psMZTBxHIlYWg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88a0f23143d75a7fe26fd6868f419102_JaffaCakes118
Files
-
88a0f23143d75a7fe26fd6868f419102_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 6.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 578KB - Virtual size: 580KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE