Behavioral task
behavioral1
Sample
ddf95b6b74181e65cb029edd36446964_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ddf95b6b74181e65cb029edd36446964_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ddf95b6b74181e65cb029edd36446964_JaffaCakes118
-
Size
822KB
-
MD5
ddf95b6b74181e65cb029edd36446964
-
SHA1
374e2922dacbf5e2642b06b9659679b3cf737192
-
SHA256
1746a2f651c5e5d9032dccb316c361768d9d93c569d57920f6562418f4512ea6
-
SHA512
cc8c04c99d176b747727c3393fc54c1a9c1fdf71a7724317e0f197a225d0e44234911f59102b2400aa9659678bb2b70e1b07cfc071163693666058635c5dfc35
-
SSDEEP
12288:vMdqrKFIxnO05TkKKBvxaqROvfsxtVvWNwF82ppFQaTnJbWN3BB5AoS:kdMKF+P5TkvB7Yf+tgNavpp+AJKX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddf95b6b74181e65cb029edd36446964_JaffaCakes118
Files
-
ddf95b6b74181e65cb029edd36446964_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 804KB - Virtual size: 804KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE