Behavioral task
behavioral1
Sample
b21f8100d6d01823f3faf1215040a3b5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b21f8100d6d01823f3faf1215040a3b5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b21f8100d6d01823f3faf1215040a3b5_JaffaCakes118
-
Size
126KB
-
MD5
b21f8100d6d01823f3faf1215040a3b5
-
SHA1
4d6b79ac85ef147601efefb04f99f4f42330c5c2
-
SHA256
18d29572761de59b23668933ec832fb42944c79c550e2a4938ac3b9fc4756999
-
SHA512
bcdd4a19c9ce2b138a70964b9028f2a7e30d3f6ddf62012f36ddb4985de2b879eaf4b33692f60418e35409d39a5fea7b8f32dcf0789ebd69b4cb794c4d640c3f
-
SSDEEP
3072:+D1fAMgQJY3JnHbcMljLU5+rZ5IGZwa+kF2JAFfj:+2MBJY5nHbxxIJa+kF2JAJj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b21f8100d6d01823f3faf1215040a3b5_JaffaCakes118
Files
-
b21f8100d6d01823f3faf1215040a3b5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE