Behavioral task
behavioral1
Sample
b255c2d5976e29b32f3a629f13d6c9f4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b255c2d5976e29b32f3a629f13d6c9f4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b255c2d5976e29b32f3a629f13d6c9f4_JaffaCakes118
-
Size
103KB
-
MD5
b255c2d5976e29b32f3a629f13d6c9f4
-
SHA1
ee90972deecda54da936ff24b6fb05d876f1abdb
-
SHA256
4d844e35f03dd81d151b19bc61a93a52b2c151d4c604f02ea35c7952f5388484
-
SHA512
6d61b6522a9f7c00bf36e2efbb4edb126e5b6e3e278c05f100ee8cf40c03c7f1cd4dab86e6e72f5630e9f144460a2f7cdab0fd963a2e0cfb16406184bb56f260
-
SSDEEP
3072:5C4W/1/hjT+yi1NLx1ZAnSRPALmuCKK2Ch:rW9UyaLxTAnSRIkT2Ch
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b255c2d5976e29b32f3a629f13d6c9f4_JaffaCakes118
Files
-
b255c2d5976e29b32f3a629f13d6c9f4_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 152KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 102KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE