Behavioral task
behavioral1
Sample
8efd01cf2017456a7bce70f6a491058e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8efd01cf2017456a7bce70f6a491058e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8efd01cf2017456a7bce70f6a491058e_JaffaCakes118
-
Size
137KB
-
MD5
8efd01cf2017456a7bce70f6a491058e
-
SHA1
8ca75c96afa99dd50070ab6698621d7406cc6ecb
-
SHA256
1b0f49e869a2f69228d4185358e6bc240ea98cfc23ca713a1428060860c9f8c8
-
SHA512
0ec02e277f40025757a540a78d9ca230dbbaee19fa0575fff996ec7e164919e7a6a65da6c97ebf4abc3847e9b1bf37151b13988519925218f18e35dfbb62d9fc
-
SSDEEP
1536:J4nrqyjrPvRu/BCjnqy8B/lCew3h0Yb9hzuMYaHqW5g1HSlJNprKR9lpJtHL53WB:ye8jMCjM/keGyMYaKW6IXrORRJtrlBR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8efd01cf2017456a7bce70f6a491058e_JaffaCakes118
Files
-
8efd01cf2017456a7bce70f6a491058e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE