Behavioral task
behavioral1
Sample
dff5a7c8325fd4f0e25dad81a0ae8d2f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
dff5a7c8325fd4f0e25dad81a0ae8d2f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dff5a7c8325fd4f0e25dad81a0ae8d2f_JaffaCakes118
-
Size
231KB
-
MD5
dff5a7c8325fd4f0e25dad81a0ae8d2f
-
SHA1
2e1e8b84972878bb054493c4268d6c8198becbfa
-
SHA256
9a83629007a3ca0b5f5d74b9003a9e33ba68d3fe1bb049663f5a7a5ac5deb099
-
SHA512
21dc8bd1c263f600adccdb10f8b3afb25dcc9ab5989f24b2433d5a96812c5d76f03b9efebca54f23e4877e9473e38eac92d966f7a1140963b8e3bf5f4db03d59
-
SSDEEP
6144:vhbZ5hMTNFf8LAurlEzAX7oAwfSZ4sXvzQIU:ZtXMzqrllX7XwEEIU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dff5a7c8325fd4f0e25dad81a0ae8d2f_JaffaCakes118
Files
-
dff5a7c8325fd4f0e25dad81a0ae8d2f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE