Behavioral task
behavioral1
Sample
8abe8576716d11d77a584e1d7792ad26_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8abe8576716d11d77a584e1d7792ad26_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8abe8576716d11d77a584e1d7792ad26_JaffaCakes118
-
Size
172KB
-
MD5
8abe8576716d11d77a584e1d7792ad26
-
SHA1
f05fd2f65ef20e992364ef9f7f9c63a0a1235505
-
SHA256
2b02a39ef8fdc10f2e6050da216b9de21985e484c081343e130e31a65c000930
-
SHA512
e707d700bb1c93bb4f293f4d0988038d044a29d1919ac91bc2ac1c216656b25a3be991c061f867104692c3e6e55d13e25e32cc0058d876801defc2a2ebb44298
-
SSDEEP
1536:+0lZu27npHiW7yiYhe2FViDWeM4IA6cQyjvjYG7x45SBeTS/B8Tput0le8:+w7npHicYh/wFfIFc1KEcTTy6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8abe8576716d11d77a584e1d7792ad26_JaffaCakes118
Files
-
8abe8576716d11d77a584e1d7792ad26_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE