Behavioral task
behavioral1
Sample
55a92d04fa3dfe5bfbf728c549e9e7f0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
55a92d04fa3dfe5bfbf728c549e9e7f0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
55a92d04fa3dfe5bfbf728c549e9e7f0_JaffaCakes118
-
Size
191KB
-
MD5
55a92d04fa3dfe5bfbf728c549e9e7f0
-
SHA1
ba4c10620cb99545be9dfa7d055979645035545d
-
SHA256
b365b9342d96c799d2eed2490e5a91e70c91e174800ffc3ae580e92b870fe234
-
SHA512
be3a2bef36f469ae4049908be5467ac94700dfbbc2fd8fbbda0363c784bf0e2a766f6fccba3233393b5e3ad7a9943f98508abe3c54d5389d38d7ac0467f46d8c
-
SSDEEP
3072:WL9D7qQVNH57X5dVTSDA50fPPZmgVnWnu5YQnKiXHk3YjVdHtPMoxu84xl3LuZMe:WJhx7XnVTuhnPcgVeuJnKmoYjVdNPzQ4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55a92d04fa3dfe5bfbf728c549e9e7f0_JaffaCakes118
Files
-
55a92d04fa3dfe5bfbf728c549e9e7f0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 246KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE