Behavioral task
behavioral1
Sample
c7e5d88dcf749f61d20e07113f47535c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c7e5d88dcf749f61d20e07113f47535c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c7e5d88dcf749f61d20e07113f47535c_JaffaCakes118
-
Size
43KB
-
MD5
c7e5d88dcf749f61d20e07113f47535c
-
SHA1
47b2ab84ae012a4ee2b326383f1ac1e0cc0cb37d
-
SHA256
8ac5456cfde4b71707c2bf3e498590984dedc64a678f4700d448bc261109ee82
-
SHA512
2b0c680d54b8a4f1500991ac1c15c473f03ba3147fdc7c4306fbe3aa0ee4bbfd7b8eb6231077636f4185bf6ccd67fc0a0778ac2d9096c03216196bf467e178ee
-
SSDEEP
768:hcLpQDRHBv1qCD4Z5fbyOMxLo3hy4YVKoqU8+Mo2L2bEJTSbp3jkREa16FG3o:hcLyN2jyOMpo3UooBLbExSbpTOtyG3o
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c7e5d88dcf749f61d20e07113f47535c_JaffaCakes118
Files
-
c7e5d88dcf749f61d20e07113f47535c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 80KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE