Behavioral task
behavioral1
Sample
d6a50eb6037564fb3d0d5abc327dac36_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d6a50eb6037564fb3d0d5abc327dac36_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d6a50eb6037564fb3d0d5abc327dac36_JaffaCakes118
-
Size
177KB
-
MD5
d6a50eb6037564fb3d0d5abc327dac36
-
SHA1
7ec3454fbda00f7cc5bd45e5195571bd33e05a98
-
SHA256
34e377ccddc401ae894f9ea181e945f46403deedb1b0eb1c4778c8c7aca1e0bc
-
SHA512
089b65e4909cb4de909081bdde392f5bf91c7e0b698202807d0d275eca0c2279101b544114504364b96aced5b53f47a23ea8961fc03709cec963371bb13ad70c
-
SSDEEP
3072:LgDNLLMFIm7geixqpWrkOtofbK3yKjmahs4YHCDRKgxS9SPovidimfOpQSifA4:LlFrElxqpW1ojKCeXdDRKQ0SP4jiY4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6a50eb6037564fb3d0d5abc327dac36_JaffaCakes118
Files
-
d6a50eb6037564fb3d0d5abc327dac36_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE