Behavioral task
behavioral1
Sample
d3468dd6ade176161576d717876cfe77_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d3468dd6ade176161576d717876cfe77_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d3468dd6ade176161576d717876cfe77_JaffaCakes118
-
Size
367KB
-
MD5
d3468dd6ade176161576d717876cfe77
-
SHA1
3187830a5f2c98d34c557f5f94a9e1a5ad5d7bff
-
SHA256
cf8545f318bda80d992f085b90bdf6eb393441bf1532519012fbe4fa10521a0b
-
SHA512
8ac1656ab6de1a6090e0e467c6bef06103d1f6fb37d0ec426320f5687bf0d1811e1a894734c9bbb9654ce1990e476bb3011335bb2c40bc7066e3951dad808304
-
SSDEEP
6144:zXDesIoH0adkl2nJ1zFHQknlkSR2kbNtw4Ld5Q044/kUtLe89jlVg:bDvxUada2nzzFwKlf2kbNtw4q4/TLe8K
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3468dd6ade176161576d717876cfe77_JaffaCakes118
Files
-
d3468dd6ade176161576d717876cfe77_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 1024B - Virtual size: 728KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 356KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE