Behavioral task
behavioral1
Sample
8d8e7bf0ab61ec43d2226adbe3918fa1_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8d8e7bf0ab61ec43d2226adbe3918fa1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8d8e7bf0ab61ec43d2226adbe3918fa1_JaffaCakes118
-
Size
153KB
-
MD5
8d8e7bf0ab61ec43d2226adbe3918fa1
-
SHA1
8ae4c7bd53de2ec4d38619f68e24a90f6a69242a
-
SHA256
4a197df8feea38065268abd335a31845f3fca3fa8985eb8d2f9e3197a30f8c78
-
SHA512
a33ecd86ec7f5feac8633feb7de28b1daa1693c7d74c130573cdc219a806e7146cf96fb3fde13a30881a9fb23a31dff2af664e8f128bda5de6051aafddcf447c
-
SSDEEP
3072:K5GfCUprvZC+rY+nxWdg+xnXwauwYU5SGiMnNmitmyEnv8:KcxWg+hXwNUiu0it7mv8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d8e7bf0ab61ec43d2226adbe3918fa1_JaffaCakes118
Files
-
8d8e7bf0ab61ec43d2226adbe3918fa1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE