Behavioral task
behavioral1
Sample
baf97303b97022a6b6d4afe6e69ec7fc_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
baf97303b97022a6b6d4afe6e69ec7fc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
baf97303b97022a6b6d4afe6e69ec7fc_JaffaCakes118
-
Size
32KB
-
MD5
baf97303b97022a6b6d4afe6e69ec7fc
-
SHA1
0ad8da81e14042dbe5e59e5856d504826baf795f
-
SHA256
ffce40e01f059ffd6c6edd22c2da95143249d32f336e8a7b9aa7b722588a4986
-
SHA512
5fedc48c62a220255006b84ab7437ad03813834dee83217cc32c37ce1576ecbb23145891cda90978134bf6a0a71bb1812e07d6ec58ae8745e7568c5af55c456d
-
SSDEEP
768:mPN//+Maflog4154+paRZGQWg86SZ5QEbO5:DrugG54+MGQWg86SnQl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource baf97303b97022a6b6d4afe6e69ec7fc_JaffaCakes118
Files
-
baf97303b97022a6b6d4afe6e69ec7fc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 512B - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ