Behavioral task
behavioral1
Sample
b1173330d94c8073198b1e8a472db32f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b1173330d94c8073198b1e8a472db32f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b1173330d94c8073198b1e8a472db32f_JaffaCakes118
-
Size
156KB
-
MD5
b1173330d94c8073198b1e8a472db32f
-
SHA1
b0f6ba5165895086d814d5bb6a553ad9e6a8fc70
-
SHA256
c4829b8ecb5fc6c6e7b72f4b3a5ca37b1d0db98788d85c40877ce89592fbb1a2
-
SHA512
a49b7b86fb1903b5c9946f280c1e22a869de654bb606f4c4546a51970338024ee7466f7381eb0903f2127c28e25bdc2bbb6ee8ee4848d4a3c2e259423cf9d0cf
-
SSDEEP
3072:1gkjtq9FV4g/UFwT9maSE/E6mCXGbMCDA22Lr7gZIfxacuE8edEoH19E5suTXrPB:1gkZqHRc+T9ZEycMCDA77g4apZedB1Kb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1173330d94c8073198b1e8a472db32f_JaffaCakes118
Files
-
b1173330d94c8073198b1e8a472db32f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 176KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE