Behavioral task
behavioral1
Sample
c95087e5b5244f29bfe97cb41b7e1629_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c95087e5b5244f29bfe97cb41b7e1629_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c95087e5b5244f29bfe97cb41b7e1629_JaffaCakes118
-
Size
354KB
-
MD5
c95087e5b5244f29bfe97cb41b7e1629
-
SHA1
2400c37d4b29a8f8f53451d2bac3875e9adb9478
-
SHA256
bc4da0b268035c155211362034cccd4f841c7a4388ace9f7d5d40147bd4bcdda
-
SHA512
86faab9ad682e81f0f2f6d6ad20f6292c82f265f4a19a602441245c6124d569a0f95847d4d1a5f5b0af76ea590fc4f822ee9d5c70f0e11992c802a6187a79e63
-
SSDEEP
6144:KxEBpx7Z46F8AuSWsfbnqmnPe/OLcdpiIOyeAN6LrLysPSTm0bD8cxt:VpJZ46F8fc+mnPewcgAN6jyBJrn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c95087e5b5244f29bfe97cb41b7e1629_JaffaCakes118
Files
-
c95087e5b5244f29bfe97cb41b7e1629_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 876KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 324KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE