Behavioral task
behavioral1
Sample
b8071bbad6fe6e23163fb5ade99c31c3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b8071bbad6fe6e23163fb5ade99c31c3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b8071bbad6fe6e23163fb5ade99c31c3_JaffaCakes118
-
Size
536KB
-
MD5
b8071bbad6fe6e23163fb5ade99c31c3
-
SHA1
c0ebddee75bf1d58f9b4f4b56677bd40957ce187
-
SHA256
b38685c2ff507e0bfec339a4b9f093429add32267ae3d4dd6aeb96215a419c97
-
SHA512
01ffa4163253700d944d22b3d75035aa4ef116ca40e9cae9ffe3e056813fdb0b0e7794df6a308545d8ff1485ba401efeae31b9a65a74c9cdc3a9c8c822822969
-
SSDEEP
12288:GDEmsFBF9c0ZWU2dlzsmgv8i1wFr4Q9BYbqpZLaSoS:Ghs9cg2ImywCQ96bqp1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8071bbad6fe6e23163fb5ade99c31c3_JaffaCakes118
Files
-
b8071bbad6fe6e23163fb5ade99c31c3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 6.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 532KB - Virtual size: 532KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE