Behavioral task
behavioral1
Sample
008d5ac6b0972b437dd01b7190335570_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
008d5ac6b0972b437dd01b7190335570_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
008d5ac6b0972b437dd01b7190335570_JaffaCakes118
-
Size
4.2MB
-
MD5
008d5ac6b0972b437dd01b7190335570
-
SHA1
bce54f8ead79fb8f960b94e81cfffb7fc35c393e
-
SHA256
b22632380c05ae0bfb763903eaf41f377cfa1dc0629391dd11f5cc9469fbb7a5
-
SHA512
b42daf07402c6b122a0fcbb377e5e1ebd783e39418df3465c12cb2b72d3db6f2e5e9d8bc1532ac99a3161709ce8a45fb40954ee38ac53e46fc010d1b872ec09e
-
SSDEEP
98304:+lD7bShCpCuOulz9WVDw4JcAdRbPbmj8YAuSKI:CbShE/FcaE1JdX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 008d5ac6b0972b437dd01b7190335570_JaffaCakes118
Files
-
008d5ac6b0972b437dd01b7190335570_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.4MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE