Behavioral task
behavioral1
Sample
ad1125421492005e6cd7feaea1647a43_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ad1125421492005e6cd7feaea1647a43_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ad1125421492005e6cd7feaea1647a43_JaffaCakes118
-
Size
1.3MB
-
MD5
ad1125421492005e6cd7feaea1647a43
-
SHA1
58321257e4295c10e2b878085cd4283ed5989ae3
-
SHA256
76c3d4d14b0d56a19470f00ffc06017a2001df52ebd4523560b37c25a101daf5
-
SHA512
dd0a1952ff1768e0f9a30c045b7d48faff11ff5c4a47d65680cc653db13e8c6bdf54d53bb1d579865ae745f43e10d147513778188a3cedfd54dc7a8ff00768c8
-
SSDEEP
24576:lDGs1w6UbA01L9HHo9v/eql0m4waaXfLYTFZQBbHW:lDvkipe4RkTQBa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad1125421492005e6cd7feaea1647a43_JaffaCakes118
Files
-
ad1125421492005e6cd7feaea1647a43_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 836KB - Virtual size: 836KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 465KB - Virtual size: 468KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE