Behavioral task
behavioral1
Sample
df50d5fa307f6ff7cb44d2774d5c3d3b_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
df50d5fa307f6ff7cb44d2774d5c3d3b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
df50d5fa307f6ff7cb44d2774d5c3d3b_JaffaCakes118
-
Size
373KB
-
MD5
df50d5fa307f6ff7cb44d2774d5c3d3b
-
SHA1
de57bb4d27dd223ac7b955475ffd19f92ac65fd4
-
SHA256
199693b23c1c576d51dbb55f1263a1856fda5c8a6df5928ab9f66b60e5d93ab8
-
SHA512
ae9fe39b21bab43956f8361ed63264fd0bd9d5f026b6f15cdca7bcd2c064cc22068bde42334fdfaa32c48c8e26b88cc36b2bfd971318ef991c23d4353fb53547
-
SSDEEP
6144:3075xaakC1VHuK/P6iOBLSkKgITSu5//NUW46Okwp2wqi8NGw+U:3cDaaH1556iOBzK9N/Nv4Jkqtqi8NT+U
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df50d5fa307f6ff7cb44d2774d5c3d3b_JaffaCakes118
Files
-
df50d5fa307f6ff7cb44d2774d5c3d3b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.nfo Size: 512B - Virtual size: 472KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX0 Size: 372KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE