Behavioral task
behavioral1
Sample
c1ec0a0c032cd78eb032250cf601b4d2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c1ec0a0c032cd78eb032250cf601b4d2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c1ec0a0c032cd78eb032250cf601b4d2_JaffaCakes118
-
Size
36KB
-
MD5
c1ec0a0c032cd78eb032250cf601b4d2
-
SHA1
909b8b3d659db74ac65ce7a20835274342c68b9b
-
SHA256
c90122bd7b2c653c657a2c555429d846fff23ba7de786f27d9137aebbe07edba
-
SHA512
bc501baddde6e5792f5282f5cdf0fa851b90a0a5079e010b8b5f59fb9fae14b9017ddb14efeb886bf9cf6999efdd42538961d37630530a0884d80433d7487d8b
-
SSDEEP
768:qSeVl4TVpH5fGNfFSRxRYcgLJ+YHWejqfZ0Yr2JLDMeBPb:heVWZpsNkRvuTljO+i2NBPb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1ec0a0c032cd78eb032250cf601b4d2_JaffaCakes118
Files
-
c1ec0a0c032cd78eb032250cf601b4d2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 352KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 216KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE