Behavioral task
behavioral1
Sample
af476dc8fda477a0ef28197d77e65ccb_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
af476dc8fda477a0ef28197d77e65ccb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
af476dc8fda477a0ef28197d77e65ccb_JaffaCakes118
-
Size
22KB
-
MD5
af476dc8fda477a0ef28197d77e65ccb
-
SHA1
26fcaac5896852c224ca31448551e047733037eb
-
SHA256
2f070e543fd4569456258893d3d420fd6b9064ba4d84fe4b61a25f8d5cf0339d
-
SHA512
0558c2e2130e099a02ec276854283d5f0692cbf8e289806b495135a38b7a95355a1f325c94b7540f17768143253b8b36cc3929061aff108386fd904bd5bf8c95
-
SSDEEP
384:cl7MROBp8+bV8IksUgTScQJBHCBV6WaooR9C0e3sMwMOejvQIK3x/58VUI4vDw:w7GOXVScyH8Aom9C0PniTOxB8VB4vM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af476dc8fda477a0ef28197d77e65ccb_JaffaCakes118
Files
-
af476dc8fda477a0ef28197d77e65ccb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE