Behavioral task
behavioral1
Sample
b78850f3ffa588957850a16e80c50927_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b78850f3ffa588957850a16e80c50927_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b78850f3ffa588957850a16e80c50927_JaffaCakes118
-
Size
73KB
-
MD5
b78850f3ffa588957850a16e80c50927
-
SHA1
46e2a9fbddc6e1b25b95a2219acaa33f193f88d8
-
SHA256
5c219d90d0d4a77761118aadd2c5b93db792ca38e0b5e961d63c6eb991260223
-
SHA512
f72def585780adee1bf3e247e5731c8312a5ca33ddfd72691b3960049ed64367c09d8127be44229ddf99c9fb7b0184081b5fb4ee53aca5924fbb3b34755cad85
-
SSDEEP
1536:Xc2p2NZUgVlUllbKBVxVvIjPzLu8WuhH4mFNpGU2Kjh8BSX:XQNJVObKBLaXLD3hYCpGKX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b78850f3ffa588957850a16e80c50927_JaffaCakes118
Files
-
b78850f3ffa588957850a16e80c50927_JaffaCakes118.exe windows:9 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 98KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE