Behavioral task
behavioral1
Sample
ddb0a33d4f6fafc5e8765f77572dad23_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ddb0a33d4f6fafc5e8765f77572dad23_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ddb0a33d4f6fafc5e8765f77572dad23_JaffaCakes118
-
Size
53KB
-
MD5
ddb0a33d4f6fafc5e8765f77572dad23
-
SHA1
9e35ac8d77d534338e3cf068cdcbd71f7e8d3c2c
-
SHA256
1f5c22b62903dbb4f61b8982868ee4de01ffe0981ae3b350fca3be3a3102dba6
-
SHA512
5d979816c3bc72bc0bf153f7c53b09272672d49312725b97dc3c29f0258121f41d7ecef349d0ebc0ba73803e883dd98f644ec902e3d696625a1e63875bfa252e
-
SSDEEP
1536:Y4dJooh0Wa0aer344Jw/ytUqVS5EkIijQ1fTNeb:Y4dzVTaer344JzthRZijQ1J
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddb0a33d4f6fafc5e8765f77572dad23_JaffaCakes118
Files
-
ddb0a33d4f6fafc5e8765f77572dad23_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE