Behavioral task
behavioral1
Sample
abb949f78b8e2882c7d03e6951d5c0d6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
abb949f78b8e2882c7d03e6951d5c0d6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
abb949f78b8e2882c7d03e6951d5c0d6_JaffaCakes118
-
Size
2KB
-
MD5
abb949f78b8e2882c7d03e6951d5c0d6
-
SHA1
8c60ce253362ece8df4bbd55a4c697c537884039
-
SHA256
40b31dcb5ebf1dc7a297d6b229493f9f7a7b0415568107df013aba6552c31688
-
SHA512
33bf094f78f1e4a9fab4f6e47c3be2bdfc8ada1d6c9a2447c83660d9604a4190c69e0a7fa781e960ac36dd5965ac80e2241915bf6bf3f2c290feca1897171348
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abb949f78b8e2882c7d03e6951d5c0d6_JaffaCakes118
Files
-
abb949f78b8e2882c7d03e6951d5c0d6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ