Behavioral task
behavioral1
Sample
ddf5d3537649f8c79b0e34ef3adacca0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ddf5d3537649f8c79b0e34ef3adacca0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ddf5d3537649f8c79b0e34ef3adacca0_JaffaCakes118
-
Size
1.1MB
-
MD5
ddf5d3537649f8c79b0e34ef3adacca0
-
SHA1
644b8e6932c164a07338133c52c95ead38dac66d
-
SHA256
b19259a489421ecca290a59966ae809cd64bb47410c3ea5d920f6f92dfcfa2da
-
SHA512
da362e5ad52eefa8f4411c3aa83f8ba52e1c5b07bd9ca9a193cfd1d44a5bba1192db8250175dfa3c1e40bcd65e9bd7ce9829f93d26c4a4d1b4ec6db1a1331e94
-
SSDEEP
12288:ZEIFfL0pzRgA3T1V3K6qH5zQjjz5olCMoS:cXzZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddf5d3537649f8c79b0e34ef3adacca0_JaffaCakes118
Files
-
ddf5d3537649f8c79b0e34ef3adacca0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 840KB - Virtual size: 840KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 275KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE