Behavioral task
behavioral1
Sample
db1ace179dd6a43642bbdd4c04780238_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
db1ace179dd6a43642bbdd4c04780238_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
db1ace179dd6a43642bbdd4c04780238_JaffaCakes118
-
Size
814KB
-
MD5
db1ace179dd6a43642bbdd4c04780238
-
SHA1
28e2867024ffe94dad57f15cd2c8798fc76a4ffd
-
SHA256
924c2cee70feca6feb23d7bcf1b5289565b93c116be84d6db43ae6e67251d51c
-
SHA512
030488209d41f9dd3130a3ad3d373568afb83a701daf996a03707d7592a92f114612922cdd3a19b0d8e789a49e9aa7648bf6ed1f53193dedb4ffdf310c463442
-
SSDEEP
24576:GKOvK/3HjYyTytAQZC32PKRampY72sXItyaOP67O:GKOC3jYyutA6PiacY726KoX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db1ace179dd6a43642bbdd4c04780238_JaffaCakes118
Files
-
db1ace179dd6a43642bbdd4c04780238_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 544KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 842KB - Virtual size: 844KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE