Behavioral task
behavioral1
Sample
d73c80a30fe6275d8e45f9e9e74dacb1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d73c80a30fe6275d8e45f9e9e74dacb1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d73c80a30fe6275d8e45f9e9e74dacb1_JaffaCakes118
-
Size
445KB
-
MD5
d73c80a30fe6275d8e45f9e9e74dacb1
-
SHA1
32bba145521b3a141bf52c547c9afa9a04828487
-
SHA256
6177b891761fa219412a07f43acd46b5077192c14f2cca11e75d363b3f376a55
-
SHA512
5b71ec9f24311dea03cead8fbedaeeb7f5b7d7a6c8a35244a4fc3dbdb76e06efee82241e91b4e1b9c6f02b8dfdeea17833bf21268f1c2541b2d4a00120469676
-
SSDEEP
6144:T+9owX6Ak5JbKFl5FOFhCpgotFWZ0qFZjfRhnQ9WKsszv:azHm5Kj5FOFIgobWZ0qrthnQ9WKpr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d73c80a30fe6275d8e45f9e9e74dacb1_JaffaCakes118
Files
-
d73c80a30fe6275d8e45f9e9e74dacb1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE