Behavioral task
behavioral1
Sample
b7dec8b55eb66566ada4650eac48da83_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b7dec8b55eb66566ada4650eac48da83_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b7dec8b55eb66566ada4650eac48da83_JaffaCakes118
-
Size
390KB
-
MD5
b7dec8b55eb66566ada4650eac48da83
-
SHA1
d2bfcba4acaffd72b802a14e2eadb23e58f90e58
-
SHA256
34d8e75abbf6bdd0a8ee9d88e6b18e5e9b13b3e4d557a6cfc0a2d6147434f33a
-
SHA512
01712af45e3cc010571cc9d2e87ff7840b5d81a02ab03327caa3cc7237f84e1a384210ec6eba71b8a6b5d73256069484596341a1753dd8187bf3e342d0f21cda
-
SSDEEP
3072:NhrpI5bLOXRd2qrQrR+ATcxGOgIQB8oX9LjN8oDQS3HpcvPMGbXEUb/mTWQBhXvH:NzIJLOSbDOAHC3MOEU8ibnhPaaeZwtg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7dec8b55eb66566ada4650eac48da83_JaffaCakes118
Files
-
b7dec8b55eb66566ada4650eac48da83_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 228KB - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 150KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE