Behavioral task
behavioral1
Sample
d2cfea35cc5e26a9f4f7b332e9167d7d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d2cfea35cc5e26a9f4f7b332e9167d7d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d2cfea35cc5e26a9f4f7b332e9167d7d_JaffaCakes118
-
Size
126KB
-
MD5
d2cfea35cc5e26a9f4f7b332e9167d7d
-
SHA1
a95f795fc08edd868df474cf49a9b49ccece2667
-
SHA256
bb4d89ccb0f5476194cf320cefdca40d4527eb5b27a24f81f6dba24ea53589a1
-
SHA512
eab0950b6a624c1cf67ed86e9f623118d9fc70b61bf31285f9c69d016685c026adc6904f90cc564a36652977fa835610692d6474c8cbc005907f6c0cd159e274
-
SSDEEP
3072:P30muTvVQFZ1ty6o9OZYdq36yjv//SGUOfmQ8RoutYZbGI:P3vuTNQxLZYdq36yjqGUO+QuoSg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2cfea35cc5e26a9f4f7b332e9167d7d_JaffaCakes118
Files
-
d2cfea35cc5e26a9f4f7b332e9167d7d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE