Behavioral task
behavioral1
Sample
c8ce60f7b39e7f2844e90225ef2d11f2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c8ce60f7b39e7f2844e90225ef2d11f2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c8ce60f7b39e7f2844e90225ef2d11f2_JaffaCakes118
-
Size
185KB
-
MD5
c8ce60f7b39e7f2844e90225ef2d11f2
-
SHA1
298f6af2e49ae111eacd531cab97b1db2e71cad1
-
SHA256
ce19466d2ce78ff2e5a4bb274f743616ef7ef6a88c288551347c5461ded90ada
-
SHA512
6ae06f0e03c878085bacb9c93a9daefa2f3e6b788e52cb661fc6c4a35e129339dcaa364574fea9548a69d552f5ea50ff0a5ca04aa247bf4553cf2dde8f7661cd
-
SSDEEP
3072:G0WBk4VE5KX1Nnd6pRB93h235shHC+5Wq2t728qw4sUdj:Gz65KXDoB93h235IdMq2t72V9j
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8ce60f7b39e7f2844e90225ef2d11f2_JaffaCakes118
Files
-
c8ce60f7b39e7f2844e90225ef2d11f2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ccrypt Size: 512B - Virtual size: 4KB