Behavioral task
behavioral1
Sample
13cb8d14cea45b46a505d4f2ff34158a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
13cb8d14cea45b46a505d4f2ff34158a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
13cb8d14cea45b46a505d4f2ff34158a_JaffaCakes118
-
Size
176KB
-
MD5
13cb8d14cea45b46a505d4f2ff34158a
-
SHA1
97880c34814f48103d0c8f56879514d463a131e7
-
SHA256
9f73a01c15cc30a45c64707cd81e04ca1dc686ab1263027dee08f277cdf23ac9
-
SHA512
ab2b6ad65c2daf2beadab2b525b9f71cc71bd579b8dfece3b1590b6aa299902530177b053cbdc5753a19d7f4e9a0ffa73a0fe55b81a30d99756d125dac511053
-
SSDEEP
3072:SNTN2vgF8DNFzCyrmyTK55jExeu6mCX26z9IRBJk72+O7yGd5oGTwn:uTNVFELCRyg5keu69zQwCv7GGT4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13cb8d14cea45b46a505d4f2ff34158a_JaffaCakes118
Files
-
13cb8d14cea45b46a505d4f2ff34158a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 13.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 840KB - Virtual size: 840KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE