Behavioral task
behavioral1
Sample
a7ca57515d10951bbd6eb25d8d2455fe_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a7ca57515d10951bbd6eb25d8d2455fe_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a7ca57515d10951bbd6eb25d8d2455fe_JaffaCakes118
-
Size
228KB
-
MD5
a7ca57515d10951bbd6eb25d8d2455fe
-
SHA1
ab9133844335a51a50b95f5c380278ba23b5a894
-
SHA256
7e0fbcd7808d608b9dd9071cf101895ed1bb7c08b1435da38772e4fc2e3fe34e
-
SHA512
88140b2472428d3d2eb487b2fc5ad9e5ea6b7ecd93262ce9aa7639e5a9e86a74ce19acd3a97d55e33e67f770b3ce80cf3d1466aaf3fddcaae33d751614a688aa
-
SSDEEP
3072:ejDQW7Skw3abFZJygl/q6Ux5mYiRyGTkqmGZ7Wovo2LanccD9rq643jXLRrN9vyJ:ejDl9NF+g1mZ2yQ3TLLE5rq64P90
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7ca57515d10951bbd6eb25d8d2455fe_JaffaCakes118
Files
-
a7ca57515d10951bbd6eb25d8d2455fe_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 388KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 221KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE