Behavioral task
behavioral1
Sample
bc8315a55356f079225adc1185d8a4b7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bc8315a55356f079225adc1185d8a4b7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bc8315a55356f079225adc1185d8a4b7_JaffaCakes118
-
Size
724KB
-
MD5
bc8315a55356f079225adc1185d8a4b7
-
SHA1
2379bfa6a1ac6fa7ed4f74ffb3b7c7e23255a109
-
SHA256
7a2a9bfc95d18714e822e8fb568f5358599c99f12a95ba4fec4e98d8d3b833d7
-
SHA512
faeb9dc6d4ba868ac932788b390802d8f38340072b2b5de805274b89c5ac997e52a6574c6f23816710b9635e46f1cad371d736edfebedf729ef59775d4e6b2e7
-
SSDEEP
12288:3ZWtI6Rk4akuVOJakuTeZJys73dOvXDpNjNe8r:3uhafrbeZJ8NI8r
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc8315a55356f079225adc1185d8a4b7_JaffaCakes118
Files
-
bc8315a55356f079225adc1185d8a4b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE