Behavioral task
behavioral1
Sample
a943a6fc0817e67d08c3d7169f386a6e_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a943a6fc0817e67d08c3d7169f386a6e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a943a6fc0817e67d08c3d7169f386a6e_JaffaCakes118
-
Size
22KB
-
MD5
a943a6fc0817e67d08c3d7169f386a6e
-
SHA1
385e0f084f596fe98d520165340b38fa74eaf4d6
-
SHA256
7b5a49cc4851884dbb73d0892c545bd3a811be71eaf33a6eb55858d131ab4d42
-
SHA512
3b62414b9fd2fa4560f5c0ae3c3f3b1a6772b11792a593752ea3787f88aac8eb3c7c536405e0188ce502f48f6ef8c6de5f892e46815a582503df8138c9d37b76
-
SSDEEP
384:so9FGfHZODy/Fry2d3GdBqrMYAww67hZzQuNyeX5ren5AO+oyEdi:so9FYnBd3CBq2iQ7eXYyEU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a943a6fc0817e67d08c3d7169f386a6e_JaffaCakes118
Files
-
a943a6fc0817e67d08c3d7169f386a6e_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE