Behavioral task
behavioral1
Sample
daa1bf334ed7376c6070e994137548af_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
daa1bf334ed7376c6070e994137548af_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
daa1bf334ed7376c6070e994137548af_JaffaCakes118
-
Size
7.6MB
-
MD5
daa1bf334ed7376c6070e994137548af
-
SHA1
e6fa1bb626256c83b682f9ecd0f10ad92a20ca07
-
SHA256
a2c06c61eb5f0db572f3549870e9b53f2eb50fffebb20a9626a6bef6dbda8797
-
SHA512
a7e6ad3c2e2cc9a52b6dc8ded22673c38ca980c81b5a2818321d22eb322c8f003df7ccffa9a370143bf03e4da7974a345702cb880fe07d9e1d86ef24a8f1496c
-
SSDEEP
196608:i7effIPEsy58doQaTzwZ8Jq3QKnqVtxQnKnqVtxQu9OryfEQncryfEQuWCLeybA+:i7effIPEsy58doQaTzwZ8Jq3QKnqVtxd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource daa1bf334ed7376c6070e994137548af_JaffaCakes118
Files
-
daa1bf334ed7376c6070e994137548af_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE