Behavioral task
behavioral1
Sample
8cb4a2a2b7db8849126ff0f35fd9d5eb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8cb4a2a2b7db8849126ff0f35fd9d5eb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8cb4a2a2b7db8849126ff0f35fd9d5eb_JaffaCakes118
-
Size
8.1MB
-
MD5
8cb4a2a2b7db8849126ff0f35fd9d5eb
-
SHA1
bd0749fb53e07ce30cefd70c4623e57ae4a5635b
-
SHA256
c50dcd54871103ec06b439a8d8d5cc7870cfbbe23b14d1687d0fbd4ba4bffded
-
SHA512
76bf4cb2013a3ca7c9598671d27dd813dd9c343addccdba40fec8b1ac324a01e03191a1fe72fdeb01616d4057e74785cccadf5d794e12f0c77d096d0850f65de
-
SSDEEP
196608:i7effIPEsy58doQaTxLhQyZbIly38doQavqU/yE/QTly38doQa6wk89+hXTI5Y8d:i7effIPEsy58doQaTxLhQyZbIly38doN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cb4a2a2b7db8849126ff0f35fd9d5eb_JaffaCakes118
Files
-
8cb4a2a2b7db8849126ff0f35fd9d5eb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE