Behavioral task
behavioral1
Sample
c8396e2e54c1f5f351e1ac7e1a8e2390_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c8396e2e54c1f5f351e1ac7e1a8e2390_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c8396e2e54c1f5f351e1ac7e1a8e2390_JaffaCakes118
-
Size
3.0MB
-
MD5
c8396e2e54c1f5f351e1ac7e1a8e2390
-
SHA1
2cf9349e1d0d67e6f50ba7db2fd912006e7df407
-
SHA256
f2ab3c2c4c2fc17925d051ac5d92a96453e3cd231271f9be56780298f6c7ca2f
-
SHA512
e680e4176bf944542cba7639a8723c90b83046d393ba94d5a18d313b86716e746f44e4e93962724c33efd565b3be06d7fc7336e0d32e5bced949030b46dbfd30
-
SSDEEP
24576:3uhaPOA2eZJ8NI8NahrOWrTx0+V8tgJd8CPln2oqmTyeZipAkE:Yy8NKT/O+V8tgJd8IlnhqCy32n
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8396e2e54c1f5f351e1ac7e1a8e2390_JaffaCakes118
Files
-
c8396e2e54c1f5f351e1ac7e1a8e2390_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE