Behavioral task
behavioral1
Sample
a890b6140ffd4b704812970074351b5f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a890b6140ffd4b704812970074351b5f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a890b6140ffd4b704812970074351b5f_JaffaCakes118
-
Size
69KB
-
MD5
a890b6140ffd4b704812970074351b5f
-
SHA1
dd7d3528fd86b53790d21b450ee59ca22e25bd99
-
SHA256
ef09b5f7a10aacdaf5810bfc27047ff4ae00d793d4665b64a9642e8e24303775
-
SHA512
c49718001abc971ec2a6cfc5a7cd832b8c22f0fc97770463c43bca2ec57603dee5bbc796d3641b7a878a75d45ddf1252ced0e94d5883449b224f224332aab3d6
-
SSDEEP
1536:VlnlFyCEcGY/Sgv3HjgtmRMo0GqOl0h5/C5:VlnZFGOvHUtboVqo0h5/w
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a890b6140ffd4b704812970074351b5f_JaffaCakes118
Files
-
a890b6140ffd4b704812970074351b5f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 171KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE