Behavioral task
behavioral1
Sample
137322a81c7a4db2ddf91fe08db3cbf1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
137322a81c7a4db2ddf91fe08db3cbf1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
137322a81c7a4db2ddf91fe08db3cbf1_JaffaCakes118
-
Size
896KB
-
MD5
137322a81c7a4db2ddf91fe08db3cbf1
-
SHA1
551f0f83625bd4c246f9eaefca4a595f4417d0e3
-
SHA256
8057a3094dc6b8dd0e9d41ea30b743b8d1f663600881f1d804e4d4ad5ccaec43
-
SHA512
486986aad83364f896da5f1856de35e21e1b12b3c23805f6976332527d8a59955ca6c59778df5795835a04575acd95fe18e49235ef4ab3f183bd2f93cab3a2c1
-
SSDEEP
24576:xwRSHHNXt5VTXgNAdx4U4eIoh5R2Ty4F9pD7uE75CJnQrYy:xwRUHVVTXgSf4BeIanAF9pDmysy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 137322a81c7a4db2ddf91fe08db3cbf1_JaffaCakes118
Files
-
137322a81c7a4db2ddf91fe08db3cbf1_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 877KB - Virtual size: 880KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE