Behavioral task
behavioral1
Sample
17894ed249d03ffe4bacd6d32f1d938f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
17894ed249d03ffe4bacd6d32f1d938f_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
17894ed249d03ffe4bacd6d32f1d938f_JaffaCakes118
-
Size
148KB
-
MD5
17894ed249d03ffe4bacd6d32f1d938f
-
SHA1
b07d6533086da04124a27c60682b123b450fb0d4
-
SHA256
a53a48843c9c8127366167624c78cbb6cb5dc789100bdbc48bddc90bba0bbffa
-
SHA512
0dcddb9892b548b40c41599436aa38f2c8299d8e0b8160ac8a2c67d05acfc77e2371ff15b72aa37058c793513f497619302b3e1f586535721dd3a42d22bccbff
-
SSDEEP
3072:8OclfSxp0F8wSXQReq3saSjLC4WYq7ZM4S2BmS1MCY7OsPAH4:8tJ2aF8wSCN/Sjm4Wr7ZM4S4/lrsIY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17894ed249d03ffe4bacd6d32f1d938f_JaffaCakes118
Files
-
17894ed249d03ffe4bacd6d32f1d938f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 416KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 165KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE