Behavioral task
behavioral1
Sample
07f2fe52f377b8ae7d99fcd14dd62815_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
07f2fe52f377b8ae7d99fcd14dd62815_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
07f2fe52f377b8ae7d99fcd14dd62815_JaffaCakes118
-
Size
2.0MB
-
MD5
07f2fe52f377b8ae7d99fcd14dd62815
-
SHA1
d7ef867c328adb6593e27694c32340ef3d0e8e1a
-
SHA256
b18b7ccda7a401eac7f2039d785b72a84db23815974982b1ccbd23646d29c879
-
SHA512
636ce5af81611cf0e878a50ccf44bbda6080bc776e2a36c6efc95dab01c03ff3f0742edc1c126abae37b49ccdb444d0959ddc5b2fd5b4919da834fc9b21413f9
-
SSDEEP
49152:oQA6vMBX2e2KhWUKFVQU+XJ+fP4mkDrZfBk+xvqLqf:dA/BX2e2KWHVQU+XJ+H4mkDrJu+xvqmf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07f2fe52f377b8ae7d99fcd14dd62815_JaffaCakes118
Files
-
07f2fe52f377b8ae7d99fcd14dd62815_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 4.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE