Behavioral task
behavioral1
Sample
ddefffb281bc35adba96cd7e6379f9f4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ddefffb281bc35adba96cd7e6379f9f4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ddefffb281bc35adba96cd7e6379f9f4_JaffaCakes118
-
Size
382KB
-
MD5
ddefffb281bc35adba96cd7e6379f9f4
-
SHA1
176a5f74c468986d45fbdf5b1d28d7160ed2d209
-
SHA256
f7fb427ecf4efce63645e471c821a65c6afa574c736ae2e600a98dc7d4be426c
-
SHA512
b7a86fc80b26ee8109bdead6fe7c93d81a8372300bdb5e1c76ee3591826b0ff0269bec91d373738cee19324b8d560831585bf9cc4a67c2c522989fffff17cb02
-
SSDEEP
6144:b8jZ7rvaU3+mWrRYJoSU8uHQNWVw41YP8dHeQMRYZnrg7JZ1BzaxuD4aM6UcJn00:beFzFQ0oSUdHQNOw41Rd6Y9gJ7BaxuDl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddefffb281bc35adba96cd7e6379f9f4_JaffaCakes118
Files
-
ddefffb281bc35adba96cd7e6379f9f4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 106KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE