Behavioral task
behavioral1
Sample
adbfc0d2fb8ad9b9f248efc12e2129dd_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
adbfc0d2fb8ad9b9f248efc12e2129dd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
adbfc0d2fb8ad9b9f248efc12e2129dd_JaffaCakes118
-
Size
361KB
-
MD5
adbfc0d2fb8ad9b9f248efc12e2129dd
-
SHA1
3956b4675fae7dda247d6773a3e79230d6c02887
-
SHA256
dd6e43b7cb4a79f1dc826136b2a479526c6dea775dd255427ea06323627e7e97
-
SHA512
ed6dc3494365153faa2f29e9cbcf88b58fef40b9274e924c644a70d8718f90f6b9f60fd8ab905aa9660daafcdde5a2868681bafb0c1c9068056d76822907ee31
-
SSDEEP
6144:qiu0srKxP6nVMg1FENy/V/5c6thb+lazG8:q50srcyLjN/5c6thb+lazG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adbfc0d2fb8ad9b9f248efc12e2129dd_JaffaCakes118
Files
-
adbfc0d2fb8ad9b9f248efc12e2129dd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 111KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE