Behavioral task
behavioral1
Sample
a9905ffbd35d468c259f913296d0e136_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a9905ffbd35d468c259f913296d0e136_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a9905ffbd35d468c259f913296d0e136_JaffaCakes118
-
Size
444KB
-
MD5
a9905ffbd35d468c259f913296d0e136
-
SHA1
12737c1ff0259ca3160d17682377e45de717bf31
-
SHA256
c82e0f66d49a31de6ab66ed42f1151c6f53d9f82a98ee04ec257bd3f1ccd92bf
-
SHA512
2a33f7c196753ce26b4adbe3bfa7b8d881c9ebd802c77aaae9ef0b9ad48a148852d996c83d0e4b58c49e1a99846f619fd11446fc3b3e3d34b7b2c49bf5c304a2
-
SSDEEP
12288:a3c3ErNA7mh0VfHnpLeBDGPYAztQ/2/hjoSQn:ec0rNAXd+Aziu2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9905ffbd35d468c259f913296d0e136_JaffaCakes118
Files
-
a9905ffbd35d468c259f913296d0e136_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 820KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 374KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE