Behavioral task
behavioral1
Sample
a7a57c9923fea2d042b231e33dc8c276_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a7a57c9923fea2d042b231e33dc8c276_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a7a57c9923fea2d042b231e33dc8c276_JaffaCakes118
-
Size
351KB
-
MD5
a7a57c9923fea2d042b231e33dc8c276
-
SHA1
4646529fc4b91ca2b0a8d98560cf4a6929ec238b
-
SHA256
2d187081b884f0235b4a357ca6a5d4875ee873eef19854666518f046d9b9c50d
-
SHA512
269966bbeafb973a1c80796effb070a4a92c52cb7fa89ac472f17b77ba5173146fe6bc04ee5ab7e076b70c40229b9a686029625a99eee1ed80fff6ca677e7773
-
SSDEEP
6144:iarFh8+7FosKQnT6zdEBJEwymZFJjHshSobuN2du8Of8OmReQbc4M:pFhRSslnT6ZEB/MhluR47bc4M
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7a57c9923fea2d042b231e33dc8c276_JaffaCakes118
Files
-
a7a57c9923fea2d042b231e33dc8c276_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 608KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 470KB - Virtual size: 472KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE