Behavioral task
behavioral1
Sample
968d52a5ef7b15d1695ea9a10e354d7b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
968d52a5ef7b15d1695ea9a10e354d7b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
968d52a5ef7b15d1695ea9a10e354d7b_JaffaCakes118
-
Size
573KB
-
MD5
968d52a5ef7b15d1695ea9a10e354d7b
-
SHA1
b6f6af3c6a8f114cb3440d5a3c916d7f2ec77eb3
-
SHA256
cbaba9d375efecbf8e3ff3492c4543c9ef4a24f96144b8604ba2446fd13813d7
-
SHA512
8fdae0a1f8e4966bd60815cc8dade5b59452e8b6a9a09f72ade1eff6468e9cc35cd5c5601fa77e70b637e2ae337f945466c0c8f991c346aa6ca49b8fb15c9257
-
SSDEEP
12288:LufI/8cYcyShEiWAzvzZWAvkHlaVOrXa4ReMNXIUANWKMJG2Qpzh6b:58cY3wWAzvzZWAvLODa4IMdSNH2KE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 968d52a5ef7b15d1695ea9a10e354d7b_JaffaCakes118
Files
-
968d52a5ef7b15d1695ea9a10e354d7b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 689KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 587KB - Virtual size: 588KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE