Behavioral task
behavioral1
Sample
f20c50457deb80c249d0e7a08ee52811_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f20c50457deb80c249d0e7a08ee52811_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f20c50457deb80c249d0e7a08ee52811_JaffaCakes118
-
Size
857KB
-
MD5
f20c50457deb80c249d0e7a08ee52811
-
SHA1
87e3650f8628e5546b3b1f037939d4e9a66b3bc9
-
SHA256
a49b681d40916a5a7a1085d7dfc88962b5cf5c6ae7819c268b78eebeecaea76e
-
SHA512
59bb9a85437f4226ecc941c0ea2b712227352456977b5e15a0ea6bfa4bda568c2f2a5045c5a96d11d3efb35d9dae2ff65bdb125fd1aac32a41cd21aec499edf8
-
SSDEEP
24576:zox0HNIx5gptENu/InVwZsePLZzkWgKdw:EI2xmptEN5ANzgKS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f20c50457deb80c249d0e7a08ee52811_JaffaCakes118
Files
-
f20c50457deb80c249d0e7a08ee52811_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 839KB - Virtual size: 840KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE