Behavioral task
behavioral1
Sample
adca3b767992da529223e5275ae7310d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
adca3b767992da529223e5275ae7310d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
adca3b767992da529223e5275ae7310d_JaffaCakes118
-
Size
123KB
-
MD5
adca3b767992da529223e5275ae7310d
-
SHA1
162e462fce05a5f679bd920bad315a592239a180
-
SHA256
782d4ec1a04bb3d8b654e4d5f0b6ca384030b2ca28ea9fb35aacee94f72eaddb
-
SHA512
bde497ed7374d9cc17043c3f5cdce2a3c7388fa9fced4de712eb9f688da28cb444adb4793d7033ada5e80e3aeb79fbd7a0b241a5a124e3c9c49cc5e681b4b825
-
SSDEEP
3072:Eb9Sb1K9HK4CTbdcsvFWj+eDafue7o0qQk0BVkY3Poutu:E5SbwRK4CTbd9W7Dan7o0TBVkEPoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adca3b767992da529223e5275ae7310d_JaffaCakes118
Files
-
adca3b767992da529223e5275ae7310d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE