Behavioral task
behavioral1
Sample
8a7770e14b0cc0d56aaf39b82dc42929_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8a7770e14b0cc0d56aaf39b82dc42929_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8a7770e14b0cc0d56aaf39b82dc42929_JaffaCakes118
-
Size
422KB
-
MD5
8a7770e14b0cc0d56aaf39b82dc42929
-
SHA1
3bf576232229226584df234af64280a4d3526705
-
SHA256
09b64f68deb1c554249c09b6ee3fc3323539130ea674abb482e39929f5cebbde
-
SHA512
0408477e026f7d5fd6db2b1bdbc90f00e5a2d119c70a1ac6d497d0da0d6cefe4b63cbcc6e8832ced9358c856f10536a9852af514755055b0098149e5025f375f
-
SSDEEP
6144:EONQOb4qidwy7w6G+AjoBu5FXZlb2kNAQPnzP1T3x/Mv+6sUOcoZf3NQ1OBfr0MJ:EDOjHJB2C5tTGsddQ+fr/fJMG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a7770e14b0cc0d56aaf39b82dc42929_JaffaCakes118
Files
-
8a7770e14b0cc0d56aaf39b82dc42929_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 330KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE