Behavioral task
behavioral1
Sample
aca5bbc6b9b28fddc1d435c9d961949f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
aca5bbc6b9b28fddc1d435c9d961949f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aca5bbc6b9b28fddc1d435c9d961949f_JaffaCakes118
-
Size
96KB
-
MD5
aca5bbc6b9b28fddc1d435c9d961949f
-
SHA1
b1d6c3bc433e03cd2245512787e35fee5f6cf270
-
SHA256
59bd71cb32609bdd34cd9340a7fb92e1e3e6d8ee6a9a88522d6e676361fbcf7b
-
SHA512
f4bcff681b9326e1388bd69516124b37f8e450658cb76cf58b61744da2f5fd6fb05d58891ebb25ec04fdabfee3e36bea11db2d865feed1aab525fd7afe19fa01
-
SSDEEP
1536:WiZeDTrJEcR+Z30EfCgN7AgxXZ5qU2noIkzUoXVn+IgOG8DM8NRi/Mk/F5M7jq:WiZTcgpzBbxpWcfXV+j8g8Pi/Mk/Fi7e
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aca5bbc6b9b28fddc1d435c9d961949f_JaffaCakes118
Files
-
aca5bbc6b9b28fddc1d435c9d961949f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE