Behavioral task
behavioral1
Sample
dc29cdb7a37768eb772389a36ea377a2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dc29cdb7a37768eb772389a36ea377a2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dc29cdb7a37768eb772389a36ea377a2_JaffaCakes118
-
Size
141KB
-
MD5
dc29cdb7a37768eb772389a36ea377a2
-
SHA1
f89e771ffbcfaaf3c4e8fec5f703846de54e6fe4
-
SHA256
efb29788bc244b26e829d9df07815755088f4ece9e0d44b96baa674a4a5599c0
-
SHA512
107d3a5749254c1f13c62bff5be57e62a2f2d9a5b6e03aa294141ed84ef7546576b8e890fac2df7864b5974d28a13c02f64e0a8974580ea23bbe8b79e99b805c
-
SSDEEP
3072:KhdN890JBiHYtcoWQyuMRH7xGPrh8m1kKHOrG41qct:E890OYtcfuOH7xurh8mU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc29cdb7a37768eb772389a36ea377a2_JaffaCakes118
Files
-
dc29cdb7a37768eb772389a36ea377a2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 117KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE