Behavioral task
behavioral1
Sample
b1db1a8c3eaf82d0b8ac1f110aaedb0b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b1db1a8c3eaf82d0b8ac1f110aaedb0b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b1db1a8c3eaf82d0b8ac1f110aaedb0b_JaffaCakes118
-
Size
2.7MB
-
MD5
b1db1a8c3eaf82d0b8ac1f110aaedb0b
-
SHA1
f20e1496fd6242491cec906ac12a7e42b514bbb9
-
SHA256
05f1f97990bbac1ce063a089d629000a30aa9f53d17fe958eb98cac50ec82db2
-
SHA512
80c949ef9631221686aaa3c2e9c7fb7457cae5617729b8ac5f8c96c30000f88f32c6cdccd86be1b96162ad4954556f3c11bfd53b7566fad86c735f898d1e5d94
-
SSDEEP
24576:3uhaPOA2eZJ8NI8NahcqmTWQ5qmTOrTxfAhrTxFrTxprTx6qmTFE:Yy8NKcqCWaqCO/eh/T/f/cqCO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1db1a8c3eaf82d0b8ac1f110aaedb0b_JaffaCakes118
Files
-
b1db1a8c3eaf82d0b8ac1f110aaedb0b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE