Behavioral task
behavioral1
Sample
bb49f24444f68794ab9366e34197be4f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bb49f24444f68794ab9366e34197be4f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bb49f24444f68794ab9366e34197be4f_JaffaCakes118
-
Size
139KB
-
MD5
bb49f24444f68794ab9366e34197be4f
-
SHA1
5267f5f924973b1401c8b5193a307124558d562d
-
SHA256
148801b42a85992ea1f2c741b67a6b7dfa7a041632d68b0c92c31cc7e8cf18c3
-
SHA512
7a6e253b827a47660d7e000f516e654ab23a45acc81c22105b479bde9b6a52e6276c206ed0b1c5d787cfd0a673a1b46f3e4b1ff3b4ef54256280d9cd2b5f0426
-
SSDEEP
3072:Ye8jMCjM/keGyMYaKW6Y307R116ouVecMdlT0/m:YftIPaN33GP16oBxt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb49f24444f68794ab9366e34197be4f_JaffaCakes118
Files
-
bb49f24444f68794ab9366e34197be4f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE