Behavioral task
behavioral1
Sample
97123afc6f27ed0f6266cff9000cb815_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
97123afc6f27ed0f6266cff9000cb815_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
97123afc6f27ed0f6266cff9000cb815_JaffaCakes118
-
Size
855KB
-
MD5
97123afc6f27ed0f6266cff9000cb815
-
SHA1
1ca175f47d0574914ce6302b1e4f8ceee37efd7a
-
SHA256
bf4ee3b33f161ea4278ee881c12ae0ad63559967d5536ba868f57d19cc5a165b
-
SHA512
a0c6dd38b392d77f920f9b2ee0c5ab61db12f8a5341006fec800402bc7f5b5264ce92b656a0b9823686bf3b6ab46ba646d853b52f585aef6886489401d53e987
-
SSDEEP
24576:zfQEqKP1OPmxbCrWftk08Odh+9wD+qHS+ae/Rju2:zI21O2CrWfrLV+qHSEz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 97123afc6f27ed0f6266cff9000cb815_JaffaCakes118
Files
-
97123afc6f27ed0f6266cff9000cb815_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 837KB - Virtual size: 840KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE