Behavioral task
behavioral1
Sample
cf4b684e61daab0e041609f7c3c96877_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cf4b684e61daab0e041609f7c3c96877_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cf4b684e61daab0e041609f7c3c96877_JaffaCakes118
-
Size
482KB
-
MD5
cf4b684e61daab0e041609f7c3c96877
-
SHA1
2f9654aa48b4c38841674fc7874c53c0c29ec46a
-
SHA256
4d3670aa961d8ac2b55a119e9fa0309806065d7b2b306c6f3bb8b761aabdc394
-
SHA512
ea184e6c6b7f3bc7ce7ca4d99e854444b5e6949bc57aa488870bf969ebc91ee71588401a2923378e30d12ee5fce3563a523a71a0ba012d85dee3b417c920c915
-
SSDEEP
6144:GWZfec9EbXDk6RkQKtrG1VVE+Ih/UOPSe570Szp3v0E2E4:3ZWtI6RkHupOB08r4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf4b684e61daab0e041609f7c3c96877_JaffaCakes118
Files
-
cf4b684e61daab0e041609f7c3c96877_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE