Behavioral task
behavioral1
Sample
ba42a22957d53b41ee9c2aa26b1dd481_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ba42a22957d53b41ee9c2aa26b1dd481_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ba42a22957d53b41ee9c2aa26b1dd481_JaffaCakes118
-
Size
444KB
-
MD5
ba42a22957d53b41ee9c2aa26b1dd481
-
SHA1
79ee69e104ce4b3a6d927b80eac7d3eba10ab018
-
SHA256
576dbc7d886d4f2d292cae4bf2fa403cfa3b1a941d2bd376b69f1e7e93e6e1af
-
SHA512
542f797217f9a03a9d68ef1f9fae98c5f20c00263c35f7dd8c155d3104dbfc5658240b8e14445cd8a2bc10fd84b88109c6af5370d24516f122290fc1364c7e0c
-
SSDEEP
6144:WLZMHlptDV+O5hcVKKFgJcZSMQeLR4fk8wNQnUTrZ6SvO+oglmc+Dc:WLkfV+NV9F70M/sirE3+ogJ+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba42a22957d53b41ee9c2aa26b1dd481_JaffaCakes118
Files
-
ba42a22957d53b41ee9c2aa26b1dd481_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 228KB - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 178KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE