Behavioral task
behavioral1
Sample
1bb8affe0c2ec27f0a3ce4ad3b163681_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1bb8affe0c2ec27f0a3ce4ad3b163681_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
1bb8affe0c2ec27f0a3ce4ad3b163681_JaffaCakes118
-
Size
3.9MB
-
MD5
1bb8affe0c2ec27f0a3ce4ad3b163681
-
SHA1
9aad06969beb4cd4bdad32c82f6da29d71856b4d
-
SHA256
ad364e2133ea4072d12861906829989bf1690bf455a9f632222f74c64203e3e6
-
SHA512
d432a146d3a615ea11655442371dcf4393f7447631c3c24bdfc92c77c805f7d51a6a45b1f76a62e0a3e1790e17aecb6e4cfd8ac7f1218cfb327ab208421dfbe4
-
SSDEEP
98304:9nVvlWiQq/CHnhMiHFvG/bSZSBIeoJlFE2P2b1qL5zwfjhbFLOAkGkzdnEVEFoK3:5dl6HnrFHnP01JjxFLOyEFoKGW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1bb8affe0c2ec27f0a3ce4ad3b163681_JaffaCakes118
Files
-
1bb8affe0c2ec27f0a3ce4ad3b163681_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE