Behavioral task
behavioral1
Sample
d0550c9700882bf5f6ee557c73231d63_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0550c9700882bf5f6ee557c73231d63_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d0550c9700882bf5f6ee557c73231d63_JaffaCakes118
-
Size
122KB
-
MD5
d0550c9700882bf5f6ee557c73231d63
-
SHA1
33370fcaf99ae058877bad3891b82f84c212e22c
-
SHA256
836527c4b3636f991409796bb39a1c0e8a0dd47004172915d3b80521112c7163
-
SHA512
a935ac04bf17c90f798375a9ff2daee299eb36cde70fe888dd2676b681a89a3b922465c8713d80a9abf08e793bfde0a4672fc877ad785cb53c646f5da42e7162
-
SSDEEP
3072:5sV+3e8esG3xNBWtXbFwmKSyDccDP8pBuoyxXq2SAsd:qV+aHxN0tXbmDULUqr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0550c9700882bf5f6ee557c73231d63_JaffaCakes118
Files
-
d0550c9700882bf5f6ee557c73231d63_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE