Behavioral task
behavioral1
Sample
db504bf2ddac018d02c2a9d9c4b8f9cb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db504bf2ddac018d02c2a9d9c4b8f9cb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
db504bf2ddac018d02c2a9d9c4b8f9cb_JaffaCakes118
-
Size
194KB
-
MD5
db504bf2ddac018d02c2a9d9c4b8f9cb
-
SHA1
f463cf34579835bc8ef54e689a0b9d03650582b9
-
SHA256
18ea03043479aa131286d379a4de7013bdd3ca78e7cada463650a567443d8b3d
-
SHA512
b642101b8fdb664b0f8d3dabcbf409a32e1543c612c05770baeb466c3e34763bd5c5f7fc5b159b71ead7877b57c7aac4f448897e34c8628a2aa3acf8f38745d7
-
SSDEEP
3072:coFZHUsFfYBrf7teEu94KatSRmOALF1n5R5Wim7k/0lbRUrLV6lFl81ub5xT:ff8jteEdSEOGfv5Bm7k8BRbM8b5xT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db504bf2ddac018d02c2a9d9c4b8f9cb_JaffaCakes118
Files
-
db504bf2ddac018d02c2a9d9c4b8f9cb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 692KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 392KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE