Behavioral task
behavioral1
Sample
bef2b1c40f37074d3a4822617c6c0056_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bef2b1c40f37074d3a4822617c6c0056_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bef2b1c40f37074d3a4822617c6c0056_JaffaCakes118
-
Size
119KB
-
MD5
bef2b1c40f37074d3a4822617c6c0056
-
SHA1
bf18f2333078cb0a6e0fc794c34313f60655841a
-
SHA256
49e7965938546cded24a166c44c628c6b36d702de76f34860c3d5f0b94646afb
-
SHA512
a6534dc6213ebdc3ab32d58ad10ac36f5ea6ce06970f0e3f64f896d02f2f3093c49fa14dedd95ae498a3c252e27280c2ccc6df91562f772c49313c38445a100d
-
SSDEEP
1536:iaMmKEB9SeVOkNV9kUY539HpWwmgw5lx5lvLvEWgDGvWSrJ9bNjtcktcAV:c29xkP53PWwnelxE2rPF6hAV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bef2b1c40f37074d3a4822617c6c0056_JaffaCakes118
Files
-
bef2b1c40f37074d3a4822617c6c0056_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE