Behavioral task
behavioral1
Sample
b24df8bd0b97aa1350a24b14cfe826f8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b24df8bd0b97aa1350a24b14cfe826f8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b24df8bd0b97aa1350a24b14cfe826f8_JaffaCakes118
-
Size
861KB
-
MD5
b24df8bd0b97aa1350a24b14cfe826f8
-
SHA1
41fd2bae25dd9ded2d19b7e3ebdc5cbda6a88792
-
SHA256
f53bacfbe8b1695164b8ceb176d82ecc454fa03cf0e78f008e2f3e50512096b4
-
SHA512
ab2ea0e583fe3f515a3c47c70d39d2b34e73a2ad555a292c95d6efc7ba8b0b869a6da1388fb1e1983fe1ae2113a7b06718c8660ec7b83635ce441bd53121aa7d
-
SSDEEP
24576:ZJTItKcANoEuS8kO1fZTpk7ao2t0rEyYWpKTz:ZJTMKtCDEOZZTW7ao2tcEyyTz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b24df8bd0b97aa1350a24b14cfe826f8_JaffaCakes118
Files
-
b24df8bd0b97aa1350a24b14cfe826f8_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 842KB - Virtual size: 844KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE