Behavioral task
behavioral1
Sample
b4abcff095c03cd9bdc0a0aa7b6b14e0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b4abcff095c03cd9bdc0a0aa7b6b14e0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b4abcff095c03cd9bdc0a0aa7b6b14e0_JaffaCakes118
-
Size
498KB
-
MD5
b4abcff095c03cd9bdc0a0aa7b6b14e0
-
SHA1
6a56d8c3d43e6c09f361656b8eaa7112d0197e19
-
SHA256
40cce4bb529466860fbe54e8b74f404c269062170cd10c1b097cc42a3dd585e8
-
SHA512
97a33c9cc73dbadeb0d105ccd011e6213d6e035ce9858644e5285e7c33ec0db77118c760ebc696dab120ea4667abfab0aed25b17a70a4b7154b05de6507ef2f1
-
SSDEEP
12288:kd2jdRNHYi5nP7VEdvWawjar6gQSzsCQX4gD3NoS:kdwXbpP76WjaRcX4g
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4abcff095c03cd9bdc0a0aa7b6b14e0_JaffaCakes118
Files
-
b4abcff095c03cd9bdc0a0aa7b6b14e0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 494KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE