Behavioral task
behavioral1
Sample
d656924af92f4f893c12d7d67452b4ec_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d656924af92f4f893c12d7d67452b4ec_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d656924af92f4f893c12d7d67452b4ec_JaffaCakes118
-
Size
582KB
-
MD5
d656924af92f4f893c12d7d67452b4ec
-
SHA1
46d612253a49b77878e36a7b07af384669120c37
-
SHA256
a17dc1094576528aff816e15e449e7eb8b0ef31c4e319fc17936632e3a3f7939
-
SHA512
b70cfd69c42b41c7c491e109ba089682b3a379d15b98e5301a39c290ecf4686b61cc5e5f5845383cc17db0f551a80443598d53e56f3cffbfb8bba68646aa21dd
-
SSDEEP
3072:RNCLngc579Us1BWiEzWXNM6yP3iSKkMkA3N3SP/4fYlNw1CG+eUrATXSvDT3A6:bvg79Us+iEQvyqvbNCYglNwMNeUriXL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d656924af92f4f893c12d7d67452b4ec_JaffaCakes118
Files
-
d656924af92f4f893c12d7d67452b4ec_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 380KB - Virtual size: 380KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 199KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE