Behavioral task
behavioral1
Sample
de6b7e8ea7ef34104c506b59687f68b1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de6b7e8ea7ef34104c506b59687f68b1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de6b7e8ea7ef34104c506b59687f68b1_JaffaCakes118
-
Size
139KB
-
MD5
de6b7e8ea7ef34104c506b59687f68b1
-
SHA1
69ad734e5101da37ecafdeed2668574a01ced73c
-
SHA256
18c87bd51be8bef1339ce5b7a4428fcf42408cf8ef1574b3282fb12e9d8c1307
-
SHA512
ce6effd30c6818e14c3d119589b598caf85e3e143652f278d77fe61ac838f604d64fb7bf9b0480f9028477a4db40f4059b1540a898f1af02bd66488550e34e5b
-
SSDEEP
3072:Ye8jMCjM/keGyMYaKW6Y307R116ouVecMdlT0/m:YftIPaN33GP16oBxt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de6b7e8ea7ef34104c506b59687f68b1_JaffaCakes118
Files
-
de6b7e8ea7ef34104c506b59687f68b1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE