Behavioral task
behavioral1
Sample
dfb8463dfc646465d9d2f5f7dfa5e110_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dfb8463dfc646465d9d2f5f7dfa5e110_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dfb8463dfc646465d9d2f5f7dfa5e110_JaffaCakes118
-
Size
35KB
-
MD5
dfb8463dfc646465d9d2f5f7dfa5e110
-
SHA1
f763fb8457ad15add4b6c7b9f1a51f2f6f931c14
-
SHA256
5c18e14e0c2e77361b28cca4c8f954380febaf10d104c42c9285afaf4b799498
-
SHA512
20ab25cdc8ca1b888bc1724529cbd30d6163c2ee7cdf9ade0569c8e313116f547c9b62bf94a6a734a8ce1555d26d1891384236d2a9b2e3dd40afb3cffdb58cb4
-
SSDEEP
768:M19WbWzblezLPZY7OR2MkLH11BStCy/FZ/8w5dy4yfd:SMilWLPGJL17SNnG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfb8463dfc646465d9d2f5f7dfa5e110_JaffaCakes118
Files
-
dfb8463dfc646465d9d2f5f7dfa5e110_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE