Behavioral task
behavioral1
Sample
8dc8d12f6b1039a8875120af58ed0dc1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8dc8d12f6b1039a8875120af58ed0dc1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8dc8d12f6b1039a8875120af58ed0dc1_JaffaCakes118
-
Size
177KB
-
MD5
8dc8d12f6b1039a8875120af58ed0dc1
-
SHA1
b95c22d5083be03a1e206be5579d9c1157067425
-
SHA256
3a241816b1dc1f41dd5ddf797314f351decda6ab234bdd8cb730305fde837b4d
-
SHA512
4d8455558ce692c88b9409fd0ebdfd1099a4facdc16476b3a5c8f3c37d4165a317ae6b984524efbc24364e4a5bc5a288b6dbd3f8ae6dc3a48d60f7c7f44943ec
-
SSDEEP
3072:M+mpLGwx1DLabfNUt+h2WyY71TdURXqRliZokcRoAoSDHSz3wZKr:MN1DLUGm2+p8ikcOAXDWUKr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8dc8d12f6b1039a8875120af58ed0dc1_JaffaCakes118
Files
-
8dc8d12f6b1039a8875120af58ed0dc1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 8.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 548KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE