Behavioral task
behavioral1
Sample
d4400b15629d07f11efc37b29f5daa97_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d4400b15629d07f11efc37b29f5daa97_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d4400b15629d07f11efc37b29f5daa97_JaffaCakes118
-
Size
139KB
-
MD5
d4400b15629d07f11efc37b29f5daa97
-
SHA1
fbfbb86780bb53c9538e1fc0d7386e9f8bedf181
-
SHA256
163f613617909267daa20ce4e37c58b68bf01d72da8e9b799ce655344b7de4ee
-
SHA512
bb6c2e6cbe5d8414a493cb004de9e215919eb0f5175a94242a92244a47ef556df19d26dbb6261d6162c1d78330fcf724d1d9ef4f2574c0d33c6b5aa41c1be826
-
SSDEEP
3072:DMrhnVhbkptWFOwxMgkp2Jrxb2VaUttXtJCpd:DMNnVRkbWFO4MgkG2Va8Xkpd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4400b15629d07f11efc37b29f5daa97_JaffaCakes118
Files
-
d4400b15629d07f11efc37b29f5daa97_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 185KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE