Behavioral task
behavioral1
Sample
bbea1a5dd9385b10f20e76163b0a0051_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bbea1a5dd9385b10f20e76163b0a0051_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bbea1a5dd9385b10f20e76163b0a0051_JaffaCakes118
-
Size
18KB
-
MD5
bbea1a5dd9385b10f20e76163b0a0051
-
SHA1
70465a68345cd6416702ac18e892c2d6b3bf1f55
-
SHA256
179997fb5df298bc61f219d6b88e468062bbdf09b776695752f66d5252905b18
-
SHA512
b437458cad2be5a995b6a115d62c1ed71dcaffabdcb9fc10146e444c9b4d34b2cd129babd416b0de29df4fe75e188075158babd43045a30ca973793564ef355d
-
SSDEEP
384:AQa7DU6mH6Q2wDbZIdZWN0y8a55FS+8/uPR0xed:AQIcFD+dZWWy8afFD8/uZCed
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bbea1a5dd9385b10f20e76163b0a0051_JaffaCakes118
Files
-
bbea1a5dd9385b10f20e76163b0a0051_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 436KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 237KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE