Behavioral task
behavioral1
Sample
ffd423bcbae082d7692c6055901237ee_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ffd423bcbae082d7692c6055901237ee_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ffd423bcbae082d7692c6055901237ee_JaffaCakes118
-
Size
917KB
-
MD5
ffd423bcbae082d7692c6055901237ee
-
SHA1
521b679d5ec065b508ffe2bda959101fde95b455
-
SHA256
556b3c8d8d28ac4645db90a9f326cca0b492454a27a5944190b52e3e16d54265
-
SHA512
25e6094105520ba08e140fa930e8282b9e1a10c04c72be1d5a0976741350fa2a4a791e35218ac7a18639d88a0db88b050f5a552de8ce647992c03627cdb91e08
-
SSDEEP
24576:HIa7MvMoIceaNc+IBDnUggZhefKsZKnOIJ:Hg0GeoGZKnfJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffd423bcbae082d7692c6055901237ee_JaffaCakes118
Files
-
ffd423bcbae082d7692c6055901237ee_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 376KB - Virtual size: 376KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 530KB - Virtual size: 532KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE