Behavioral task
behavioral1
Sample
d07182f57922792bc86110834b2d69fc_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d07182f57922792bc86110834b2d69fc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d07182f57922792bc86110834b2d69fc_JaffaCakes118
-
Size
29KB
-
MD5
d07182f57922792bc86110834b2d69fc
-
SHA1
04a12b4a05e4acb789c38a4e7eff1bdb96db6518
-
SHA256
651f8d67105f980beb48a3f4f58786619d6bfe4bbd15f5b0096cc3f613352788
-
SHA512
a013621b66aeca1558853995a102ced4f272b323f32668ac8c10b77ec4e7efc9f72b32ac1d8ead3a9564bf6fa68f85dd7dac4d2a03753c87acea19019171fdd6
-
SSDEEP
768:2yz7/lF7gBrO7R307cf+NO8E1ZFYHfEiLVz4Qn6bzYL6r99cY:2ynn7kaVacG81jYHciNneS6rUY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d07182f57922792bc86110834b2d69fc_JaffaCakes118
Files
-
d07182f57922792bc86110834b2d69fc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 91KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE