Behavioral task
behavioral1
Sample
d121f6e01bccbce06dee61af35d1c3b1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d121f6e01bccbce06dee61af35d1c3b1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d121f6e01bccbce06dee61af35d1c3b1_JaffaCakes118
-
Size
2.4MB
-
MD5
d121f6e01bccbce06dee61af35d1c3b1
-
SHA1
294a3c797912015f141ef94dd74d6947cab9d7d1
-
SHA256
09f6a2dd99b2a71716fedf36cccab472849cd238472d83ababe84089f406eb0e
-
SHA512
3d390fe3aab7ff0ea0e3fd728c288e62c1b8ac3a6ea9cfc052fde470f3c930d9f8f435a97f0ad92f740818a2dd003e80260efb06577218f7d1f24bcf25c5657d
-
SSDEEP
24576:3uhafOA2eZJ8NI8NahR1+V8tgJd8l2Rq2NeZ9eeZ9k8:YC8NKR1+V8tgJd8lRA4e4k8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d121f6e01bccbce06dee61af35d1c3b1_JaffaCakes118
Files
-
d121f6e01bccbce06dee61af35d1c3b1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE