Behavioral task
behavioral1
Sample
ad4824911882f52742ac2f8089251fa7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ad4824911882f52742ac2f8089251fa7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ad4824911882f52742ac2f8089251fa7_JaffaCakes118
-
Size
75KB
-
MD5
ad4824911882f52742ac2f8089251fa7
-
SHA1
b2909582b7111a3106ed69311936138ab9d061fb
-
SHA256
2f1ef4223ee3686d70ec138651f3af12b8dab76434b65c66d3bb325036e4a064
-
SHA512
0c1c353917a8c3b3b722d3fe23efd218872db0985eeef580b25833e2823457ec5189176d374d6adadad0bf5602fccf3e845aadecf2f39b2f3a06634de9c5ec38
-
SSDEEP
1536:b9l9MzO4G8SwBLkAKLHdFpcKmd/ki427iU2kjAaR+j+YS+XbZBVkqAUSA:hy7SwBwpbNg5T4ehXh3mZBOex
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad4824911882f52742ac2f8089251fa7_JaffaCakes118
Files
-
ad4824911882f52742ac2f8089251fa7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 143KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE