Behavioral task
behavioral1
Sample
ba7c0294aaca3dd8146364661b173ddb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ba7c0294aaca3dd8146364661b173ddb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ba7c0294aaca3dd8146364661b173ddb_JaffaCakes118
-
Size
800KB
-
MD5
ba7c0294aaca3dd8146364661b173ddb
-
SHA1
45ea8b6f09822dafee8f51ce4d4c5b1fb0a90dac
-
SHA256
ef75c8c6f585e374483b03675ae9105905adfd120383768cff203b4ce7133db4
-
SHA512
0a1a4446300e1fe2caa45a672157746985f68c31b9ca55da88cd6eb1e627f1553f4943aed1c8555f2d7a85f86bdaf090d07c003a48f701ef74433fabd6a74084
-
SSDEEP
12288:ySmMLSukLKmBEi7eC2JDT0sbdbwglv3gLqoMpeN23Y:ykLSuwKv/9JnTZ1gLqdY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba7c0294aaca3dd8146364661b173ddb_JaffaCakes118
Files
-
ba7c0294aaca3dd8146364661b173ddb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE