Behavioral task
behavioral1
Sample
be80c4bdbeee4a57c2ba6131333c3fac_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
be80c4bdbeee4a57c2ba6131333c3fac_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
be80c4bdbeee4a57c2ba6131333c3fac_JaffaCakes118
-
Size
3.3MB
-
MD5
be80c4bdbeee4a57c2ba6131333c3fac
-
SHA1
a051c761d659b15a9cfb34c41020460ee1500fbd
-
SHA256
f0d97d54947702a939e62fb7bdfd2b336fead4eaa9800d5c849a628a38c9005f
-
SHA512
c700bea0d5036406f96f490985c81107d69e99b321f2020c8e9a3931480935504d74b9ba8ae23659e8c65663383e2e254a5527ec88b312462e305191ba5d547e
-
SSDEEP
1536:+EfFNvtgmAl7z5dKY6yuJPW8K43w9NXOM1aRl/i6JWT0S9yXnBibnouy8:+YLmGO4W849NXO9RlK6gOxiDout
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be80c4bdbeee4a57c2ba6131333c3fac_JaffaCakes118
Files
-
be80c4bdbeee4a57c2ba6131333c3fac_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE