Behavioral task
behavioral1
Sample
1767a8639f43884245f28c64f0d53630_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
1767a8639f43884245f28c64f0d53630_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1767a8639f43884245f28c64f0d53630_JaffaCakes118
-
Size
319KB
-
MD5
1767a8639f43884245f28c64f0d53630
-
SHA1
e6a1f973f014deed8fb8885c114a4fe9869b604e
-
SHA256
32d934a7adfd144836bab0e18f2bdf5ba799e5a76b7b160da71c567f44b1a2e3
-
SHA512
0dfe2fee2c7dc128b75b503fddcebc05e5d871d7e2c8d75b199a265002fee22f3bb935f51678bae42271c78c1c25630b7baae8bc15f3c1675ff306a84f06faf8
-
SSDEEP
6144:wAWEeOjYA6HT+4GjcX2LU/5TBUSowojDuUlxL3obDsUf:wAWEtj6zDGQGA/5TjeDuUlxuDsUf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1767a8639f43884245f28c64f0d53630_JaffaCakes118
Files
-
1767a8639f43884245f28c64f0d53630_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE