Behavioral task
behavioral1
Sample
dd9ea3590fdfd3a7d8cb2afbf43f4b6e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd9ea3590fdfd3a7d8cb2afbf43f4b6e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dd9ea3590fdfd3a7d8cb2afbf43f4b6e_JaffaCakes118
-
Size
54KB
-
MD5
dd9ea3590fdfd3a7d8cb2afbf43f4b6e
-
SHA1
3e75a5dd4d1be87a09221c32fa51ca8694eb77f7
-
SHA256
4e38e0d3b3ef4d9448aad71aa08e7af85145c47e6cfa07b7d30fb91247b59301
-
SHA512
137bc5a666dd63a58f3e3641a9c68f49420b525b270b51af348414cba44abf5b5acd7af15785469014a9cdeda968c40cc978ad04db95e23e8e7b14c46c34f530
-
SSDEEP
768:OUwKM2f5a6rUpLuPg44ABCVVESN+uwbmJ/so7cWV77WfFR:OWjALy94w6V1NJwa19Wf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd9ea3590fdfd3a7d8cb2afbf43f4b6e_JaffaCakes118
Files
-
dd9ea3590fdfd3a7d8cb2afbf43f4b6e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE