Behavioral task
behavioral1
Sample
94e4bda28bd5295c6d5b4a2f2696e7ee_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
94e4bda28bd5295c6d5b4a2f2696e7ee_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
94e4bda28bd5295c6d5b4a2f2696e7ee_JaffaCakes118
-
Size
60KB
-
MD5
94e4bda28bd5295c6d5b4a2f2696e7ee
-
SHA1
1b3f0dab82b22dc342f597ac8e41f49caf6958b6
-
SHA256
56d2f4f6e81cfa9823275ba499d0343a2237d03f4c9819f14b15dae716164e90
-
SHA512
b575133dd36354820ae77821c089d9d318a1750d0763dcbdf11879b03c4fd35e9baeb0470d16b509f39bc64c899fd10b93b3793ec78afd888e6d8b417193d744
-
SSDEEP
1536:HcXc170lH2pV2DGiSLcz1d9Ic7/lVQNOZDFDU:8ghVIz3N/lc0DFDU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94e4bda28bd5295c6d5b4a2f2696e7ee_JaffaCakes118
Files
-
94e4bda28bd5295c6d5b4a2f2696e7ee_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 668KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE