Behavioral task
behavioral1
Sample
8cac258bbffbf323c8778bb184c4c377_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8cac258bbffbf323c8778bb184c4c377_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8cac258bbffbf323c8778bb184c4c377_JaffaCakes118
-
Size
32KB
-
MD5
8cac258bbffbf323c8778bb184c4c377
-
SHA1
4a3fb6a873586c812308572978104a35d60a42d1
-
SHA256
178834f49af74cf0464260d8172cbc6568c1d4cd25f0c7297a0a9ed8ff75ec78
-
SHA512
64a9897bb8488ff3c0699cd2f1ec70e6e321a996b3c0631a169ba141a01a22307fe840fb14eb609abd84a34715caecf97bf93602cdd6148b99b4ee1982ee6234
-
SSDEEP
384:CZX5D055UR1TxoUMjz5ah7JciRRK34b1ADrbfYns0dW7ruDGxkj560tYadsigh7:CZRc5ULTxEah7Dwo2Dwn33DG39a6nt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cac258bbffbf323c8778bb184c4c377_JaffaCakes118
Files
-
8cac258bbffbf323c8778bb184c4c377_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE