Behavioral task
behavioral1
Sample
dd25532890d213c99e0a7900b97541a6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd25532890d213c99e0a7900b97541a6_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
dd25532890d213c99e0a7900b97541a6_JaffaCakes118
-
Size
9.6MB
-
MD5
dd25532890d213c99e0a7900b97541a6
-
SHA1
dc16d4e73e30942a6c3a979bd6cd31b3c8a72b48
-
SHA256
6308eb8900739e42de4356ca7bbeba33e9c2d6dfe280e2b3e35860ec0c0fdaee
-
SHA512
6577ed6afc44dda181b188a5ac9d9e164eaeb95ff673b7c9aa18ab9fd3aaaaa0a450de079a2b2f9695fd31157a71fc21a96f7bcfd83d08ac344965266fec5fe6
-
SSDEEP
196608:i7effIPEsy58doQaTzwZ8Jq3ELhf8cHpLG8doQpu8rVtxQuULG8doQal1Bf80bMl:i7effIPEsy58doQaTzwZ8Jq3ELhf8cHS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd25532890d213c99e0a7900b97541a6_JaffaCakes118
Files
-
dd25532890d213c99e0a7900b97541a6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE