Behavioral task
behavioral1
Sample
17488d59d518fb36bfe9d36135b27ce2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
17488d59d518fb36bfe9d36135b27ce2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
17488d59d518fb36bfe9d36135b27ce2_JaffaCakes118
-
Size
35KB
-
MD5
17488d59d518fb36bfe9d36135b27ce2
-
SHA1
47f3e962135e05930e0df7a4809c83e44bd779e7
-
SHA256
770e35a4bdd29aca3f216fc0876a614c6c277674ecc15d278161f17a749192b1
-
SHA512
aaf8b5afba417a31cd12fe90e770a67d7bf8864a5c432773e3ad9d5bef47109fe421516da4f14533c2248449c437eb3e8d5ad4c5f9f441c3073c9e058c8dcd0b
-
SSDEEP
768:/zUgyyeVEZo3VSlYn08AWMsg29anr2wUGVp1MtLZRAnTmE19viI1q8:/AShaoW2q3GdMB7An39aV8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17488d59d518fb36bfe9d36135b27ce2_JaffaCakes118
Files
-
17488d59d518fb36bfe9d36135b27ce2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 60KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE