Behavioral task
behavioral1
Sample
bdefaacc9f4cf8c94acc47829dc570ac_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bdefaacc9f4cf8c94acc47829dc570ac_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bdefaacc9f4cf8c94acc47829dc570ac_JaffaCakes118
-
Size
40KB
-
MD5
bdefaacc9f4cf8c94acc47829dc570ac
-
SHA1
659b96555a7a3e3d09e06838fd558c3a2368577a
-
SHA256
15bb619c1149b5a352cd2cf9ca8e1d3eda280da0c51e37d430de2eb28bf253f7
-
SHA512
ba0c4325a399c1ad9ed127f2a31fdf8807c73366bcd305b65a61d45223109c482214e3d5cef3a5c655b33e05729faa379adbc3195bbcc52c03e72d8e386ebb9f
-
SSDEEP
768:ejSALy/Z2Yb+jso3iTx5ZPljGznxKG3qQMNGGaptZghRsDy8TH3eAEF:aLQUYyjso3YNqnQGhMUGaptZghRI3eAW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdefaacc9f4cf8c94acc47829dc570ac_JaffaCakes118
Files
-
bdefaacc9f4cf8c94acc47829dc570ac_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MaskPE Size: 512B - Virtual size: 449B
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.MaskPE Size: 512B - Virtual size: 363B
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ