Behavioral task
behavioral1
Sample
c930adcee14d0f4080739a1c78d62abf_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c930adcee14d0f4080739a1c78d62abf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c930adcee14d0f4080739a1c78d62abf_JaffaCakes118
-
Size
917KB
-
MD5
c930adcee14d0f4080739a1c78d62abf
-
SHA1
61178fd2ebb6a0e7223a88038668842cf412a79a
-
SHA256
3418974b83ee02946440cdba44569f06647d3da2ea2c1c88f78d2e6300fa71f1
-
SHA512
a3bb991fb55ddfbf44debeadc8a6e7b53106386890e2fc35c3d4047f6cebd88b529684af4ad706c6773f0b1c31622efea9cea68d7d594e1baa39b81627fb4d39
-
SSDEEP
24576:+Ia7MvMoIcea/ynZ63sqQggZhefKsZKnOIPB:+g0Ge22GZKnfPB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c930adcee14d0f4080739a1c78d62abf_JaffaCakes118
Files
-
c930adcee14d0f4080739a1c78d62abf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 376KB - Virtual size: 376KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 530KB - Virtual size: 532KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE