Behavioral task
behavioral1
Sample
11692881a137419298c4dd1c80c9935b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
11692881a137419298c4dd1c80c9935b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
11692881a137419298c4dd1c80c9935b_JaffaCakes118
-
Size
33KB
-
MD5
11692881a137419298c4dd1c80c9935b
-
SHA1
98f41890ced313747fcc93197ae549bdae7def60
-
SHA256
6ce448e60ec2ef9d37cc80b5590c5ca847224228b85be62de9c5c84f9dcdcfe0
-
SHA512
4a7e8e6da5d5ed53261e18236c5fb3a0da56c5d91bedf4f7c6c4384f3c29dd019e288e3f8e5384881023c8f1a69aa21f18aac7159943bd197b60261386affabf
-
SSDEEP
768:C5VOOqJmRB77777J77c77c77c7NjN7gRF+3in5ltk45T+ubu:E0JmRB77777J77c77c77c7nIt9+T
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11692881a137419298c4dd1c80c9935b_JaffaCakes118
Files
-
11692881a137419298c4dd1c80c9935b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE