Behavioral task
behavioral1
Sample
05cf308343d0eb0da69892c5557faa3f_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
05cf308343d0eb0da69892c5557faa3f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
05cf308343d0eb0da69892c5557faa3f_JaffaCakes118
-
Size
99KB
-
MD5
05cf308343d0eb0da69892c5557faa3f
-
SHA1
fd1e216c711e547f895a6dfb650e6b97685325d2
-
SHA256
b4b1d73c27f9708c2ee03a82a38f2234cff1970946166976adaa7a91f7f25327
-
SHA512
d19d19273e94d2b6b9370de8e39a3d115c77451433604ae6e14b1a907899c79b355540a6db27faa8bb4f5d18e69294d039916c4ea0bc7a1e38d03993a90bfd82
-
SSDEEP
1536:+7hbtJeMGNW+sL2AzgbyUO4R8WYqaWYCBbwY7lCMg3Un:kJSMr+jAzV4R8A9H7lfgA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05cf308343d0eb0da69892c5557faa3f_JaffaCakes118
Files
-
05cf308343d0eb0da69892c5557faa3f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE