Behavioral task
behavioral1
Sample
28cf15e655e5c5bbebfd2504b37eb409_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
28cf15e655e5c5bbebfd2504b37eb409_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
28cf15e655e5c5bbebfd2504b37eb409_JaffaCakes118
-
Size
46KB
-
MD5
28cf15e655e5c5bbebfd2504b37eb409
-
SHA1
b3fe3b1e458551a863b3f314f551bbf9cfdb35b3
-
SHA256
b5408db80dd65995408dda86b6843fa2b27d76281a72ec6c143eccb5298a036d
-
SHA512
edc4dd690d7a9dc748adb0328ae5a3bbc974643b386e0f4da158c202937994d1eb66c273b77ee2499e0e56e791f36a2634b65bd79cafd4c1a8576a6a938b7241
-
SSDEEP
768:CT/F0yHfMZcNdqSBnYsnzwQyG0E1Aot9AG1eMkKX/CrY/EAPQcC+Nnh:A/8Z8cSFYUz1nt9AG1e3KX1IcC+7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28cf15e655e5c5bbebfd2504b37eb409_JaffaCakes118
Files
-
28cf15e655e5c5bbebfd2504b37eb409_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 428KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 98KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE