Behavioral task
behavioral1
Sample
c8f76c7fb7e9a13abcedba7569b0d45d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c8f76c7fb7e9a13abcedba7569b0d45d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c8f76c7fb7e9a13abcedba7569b0d45d_JaffaCakes118
-
Size
139KB
-
MD5
c8f76c7fb7e9a13abcedba7569b0d45d
-
SHA1
bb4422b32e7a6b202a53eb60cb62487a6b300b05
-
SHA256
e6877690d0bd7032f2961873ead8302797e1edd390821289806f8e3b5d682838
-
SHA512
5b1eb9ac11cf1f156a4b0d817cca29dc72a2fc33fc991c8ebf2934b078179e8ac40b9398010685749c00098ced203e7215be147d0063952324a7ffc998a69461
-
SSDEEP
3072:Ye8jMCjM/keGyMYaKW6Y307R116ouVecMdlT0/m:YftIPaN33GP16oBxt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8f76c7fb7e9a13abcedba7569b0d45d_JaffaCakes118
Files
-
c8f76c7fb7e9a13abcedba7569b0d45d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE