Behavioral task
behavioral1
Sample
ce728b32662126a2732126eb40a6aa8d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce728b32662126a2732126eb40a6aa8d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce728b32662126a2732126eb40a6aa8d_JaffaCakes118
-
Size
232KB
-
MD5
ce728b32662126a2732126eb40a6aa8d
-
SHA1
ee8f58b75bf588259fca70d26430eb2a1edce81b
-
SHA256
545bf3e81dc231b63c3ccf05e4697c098e0756966df2f4fc769dff99626e204d
-
SHA512
06baa67808e00745bdab76fe2635fe7fd18e542dc3f29070be000978d1b4c23a24daa8e24b6a1f4b08636b498945c30d46068cd9587815117fa066b6fbc3412f
-
SSDEEP
6144:t7iCCUR0V1W1LllSxdwX8v+TAaUR/ag8sRC7mgG2:JiguAWdVv+TAaUR/aMA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce728b32662126a2732126eb40a6aa8d_JaffaCakes118
Files
-
ce728b32662126a2732126eb40a6aa8d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.y0da Size: 1024B - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX0 Size: 226KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.stealth Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.FSG Size: 4KB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tElockNT Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE