Behavioral task
behavioral1
Sample
abab870226e5836b388f10577048ac48_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
abab870226e5836b388f10577048ac48_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
abab870226e5836b388f10577048ac48_JaffaCakes118
-
Size
253KB
-
MD5
abab870226e5836b388f10577048ac48
-
SHA1
0f1c0fca1e2848926d9232ec9b483bbff67b18b8
-
SHA256
60e13c6ddbcc377186a6f5a59e43b30e18f1a3de720e7a060f7755d108bf6871
-
SHA512
4dcf09d2c3a1021efc4b83b6613ec46677a290da4e781ed8d089f3ec891983cd9a27e9043915ca23c64cd01b8878341b61d20c3cf3f705451a1bdb593feb9759
-
SSDEEP
6144:+SBPV1sPLgK7oK1v1VXYGsU+lBiQ5eFZt6BQRlRqM:bBPVyPLP7o8IrLj5eFZuQRlR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abab870226e5836b388f10577048ac48_JaffaCakes118
Files
-
abab870226e5836b388f10577048ac48_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 472KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 243KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE