Behavioral task
behavioral1
Sample
d1459e8e573f2e42cdaf4fce661bf723_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d1459e8e573f2e42cdaf4fce661bf723_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d1459e8e573f2e42cdaf4fce661bf723_JaffaCakes118
-
Size
146KB
-
MD5
d1459e8e573f2e42cdaf4fce661bf723
-
SHA1
d718b8cb12424f2540b8503b7f622bf8c6ae149a
-
SHA256
c113b34025a5d971b7c0377ebc48447aa0fd3e872f55604b57b5e8f60ca00e1d
-
SHA512
001723067fb4422659cc056b1a4a399c3eee085743a4587050ac289e8a44e073d1104a114ade878bb276506ea47cd3cf710953b837887c48cbc31c89e3d2560a
-
SSDEEP
3072:odIiCY9P0nkbJ4S4LXQEoY7Zgzg1EIpvuAZWHA4PvebPDlU:StRD4LXQ+1gjKmAna
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1459e8e573f2e42cdaf4fce661bf723_JaffaCakes118
Files
-
d1459e8e573f2e42cdaf4fce661bf723_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 18.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 797KB - Virtual size: 800KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE