Behavioral task
behavioral1
Sample
b9f38573cbcd27ffa531b5449e8cebe2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b9f38573cbcd27ffa531b5449e8cebe2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b9f38573cbcd27ffa531b5449e8cebe2_JaffaCakes118
-
Size
2.6MB
-
MD5
b9f38573cbcd27ffa531b5449e8cebe2
-
SHA1
898b763ec26eec3720647a3b353f2b90550f0486
-
SHA256
06be34047d05d114537a7ac80b20d36e788f39d0a73cbc29b8f13f0c611e29c8
-
SHA512
6d1ec2ab1e42c837d86cdb7e71a56175f7d1f388fc2b464176af3ceb61f92140a8eace53023e78add366a5a6ca8f03ea0636ee42fddc4469c18832026d9b98ab
-
SSDEEP
12288:3ZWtI6RkYu0VGO9u0VWONu0VGO9u0VWONu0VGO9u0VWONu0VGO9u0VWONu0VGO9j:3uhaf8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9f38573cbcd27ffa531b5449e8cebe2_JaffaCakes118
Files
-
b9f38573cbcd27ffa531b5449e8cebe2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE