Behavioral task
behavioral1
Sample
c075e69feff8e113a6eba5e14aae9b69_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c075e69feff8e113a6eba5e14aae9b69_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c075e69feff8e113a6eba5e14aae9b69_JaffaCakes118
-
Size
865KB
-
MD5
c075e69feff8e113a6eba5e14aae9b69
-
SHA1
5863aa3a025baece69c3d76069c77675c6401b23
-
SHA256
00f0449b3bf4b44a10d272f70db47392c1a819fa7657fb34391c531e46b605d7
-
SHA512
0992387d965736503dd7e2251715cf1743e555372397f97430680856c04c8d0f8e0ea1f81e6535c4d237987752cc1deec1f73747498f87c272d03cc63cc6a256
-
SSDEEP
12288:yIe/NWQzorku4f/pp+SJh+1Xg3dzyTN8jrNMqRRy6l/vZOUR2175GiV41Ovg4X56:wo43/pp+STQXg3Fn3t0URzim0vg3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c075e69feff8e113a6eba5e14aae9b69_JaffaCakes118
Files
-
c075e69feff8e113a6eba5e14aae9b69_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 847KB - Virtual size: 848KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE