Behavioral task
behavioral1
Sample
bb75d735e857a5f857cfdbc9e0ba3a57_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bb75d735e857a5f857cfdbc9e0ba3a57_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bb75d735e857a5f857cfdbc9e0ba3a57_JaffaCakes118
-
Size
100KB
-
MD5
bb75d735e857a5f857cfdbc9e0ba3a57
-
SHA1
78df4b3d85108cfbffbf1d49ce655c09ebede593
-
SHA256
dadc7bfee2e0798a699f44fdef22e393ebb142e5805a93623223889371f3ba61
-
SHA512
8b76d6353925dff85b3ff2248f49f16d110a5d539ac7fe37f854e354e2518d9865a6ab966f6dad7875912280edb492c56b7f4a82d85769dd53ab4d77eeb93c4d
-
SSDEEP
3072:CDuwuxAyJfg6IFNobfuhRZHgcvhrRZScrBt:CDCxAyVgbFNoTwTHgcvBmCX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb75d735e857a5f857cfdbc9e0ba3a57_JaffaCakes118
Files
-
bb75d735e857a5f857cfdbc9e0ba3a57_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 744KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 328KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE