Behavioral task
behavioral1
Sample
ceab626ec7ef727c44f58a2fa3708ddb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ceab626ec7ef727c44f58a2fa3708ddb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ceab626ec7ef727c44f58a2fa3708ddb_JaffaCakes118
-
Size
63KB
-
MD5
ceab626ec7ef727c44f58a2fa3708ddb
-
SHA1
aa3536e46b345b14b368edab308edc0bac224767
-
SHA256
c03b7e248605f731470ae0b9aafe5f54cc9f65c8036a9637c4d0ce07e359383f
-
SHA512
d3f424b593546d85b80d97d3fea815e86fb78cabb175302bbc526f7c39535bc3bf0b72c8cb361ab93098c5a5f31a26cd31c3875769c9e9bd2bfe45d5989f872c
-
SSDEEP
1536:qUeU/OMOtzpYw72UTR9Mi6BJ9kpuS4aHSpJMDN0TZ969m:qjbMOrD72wRfGDXKypjZ9j
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ceab626ec7ef727c44f58a2fa3708ddb_JaffaCakes118
Files
-
ceab626ec7ef727c44f58a2fa3708ddb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 628KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE