Behavioral task
behavioral1
Sample
d421d67bf0d21963ab566cdd4e84b8b2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d421d67bf0d21963ab566cdd4e84b8b2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d421d67bf0d21963ab566cdd4e84b8b2_JaffaCakes118
-
Size
101KB
-
MD5
d421d67bf0d21963ab566cdd4e84b8b2
-
SHA1
866c9285427d2a2111d8bc73836add80c3dfbc79
-
SHA256
463dc069ffd59aa74993c2a3aad97b8b53ce6769bb5d9bbb01f58cc12b4878f8
-
SHA512
3b16b80642c2ff4e27d68adf9f8fa9dfa1915f9be8645079d9395355a7af0649b4bd9c325444ab1047876026998a6de54df79c20aa26965146125677a8c12e11
-
SSDEEP
3072:2EzhicV/JLIquHRqZDKD9H4Pp/VLmQ4rXiuRKJGN5z8/3:rGvR8uD6PpQDHY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d421d67bf0d21963ab566cdd4e84b8b2_JaffaCakes118
Files
-
d421d67bf0d21963ab566cdd4e84b8b2_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 707KB - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE