Behavioral task
behavioral1
Sample
d720365437748fa61f4d7da156527e2f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d720365437748fa61f4d7da156527e2f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d720365437748fa61f4d7da156527e2f_JaffaCakes118
-
Size
426KB
-
MD5
d720365437748fa61f4d7da156527e2f
-
SHA1
8cae4f9385b9ab58476cc8bb1484206254429980
-
SHA256
ff79b723927d3ebc1ba78fb3abe1358fbf8e7e4071d1c974c437db2ed481250d
-
SHA512
97ef92265730792e31071bf5e4a59a7ff443e9bd6ec344a99741a116a806c5c428f8390865c44a84416f3c956c28877b08bee993a4033d8e4d0ab03835a8690d
-
SSDEEP
6144:+B+qABlKz/M1NOddRIJdkztqDE8J+4OFjnLnBGlEUe4X/yUCMzLrHgz:+oae0GpOBV09LvzLrHgz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d720365437748fa61f4d7da156527e2f_JaffaCakes118
Files
-
d720365437748fa61f4d7da156527e2f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 892KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 353KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE