Behavioral task
behavioral1
Sample
bfa3fd347b5fadaf7c1899beb1ab6b32_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bfa3fd347b5fadaf7c1899beb1ab6b32_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bfa3fd347b5fadaf7c1899beb1ab6b32_JaffaCakes118
-
Size
76KB
-
MD5
bfa3fd347b5fadaf7c1899beb1ab6b32
-
SHA1
8e97b7503bab1d67f097c91a6d0cee57b32c4f7c
-
SHA256
3809d03f82aa32fd334ccf0973e0533e148739c902687ac559e83c575d5968c6
-
SHA512
e6747958e74e8536a9178b24fda7ce1e4f7a4e6af2d92434643b8945b8e1ca600b80e1f8de8abd2253f7457e90b6a63ada866acd6eac03341e5b8860453a0e32
-
SSDEEP
768:iF57x2Cj+YBn8uRCPSjM6C1wZlcQCpDkNxWTcYW:iFRx2Re56c7HXWThW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfa3fd347b5fadaf7c1899beb1ab6b32_JaffaCakes118
Files
-
bfa3fd347b5fadaf7c1899beb1ab6b32_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 655B - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xur Size: 111KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE