Behavioral task
behavioral1
Sample
f0355e47e8ab9b7e3da31220b873e355_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f0355e47e8ab9b7e3da31220b873e355_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f0355e47e8ab9b7e3da31220b873e355_JaffaCakes118
-
Size
133KB
-
MD5
f0355e47e8ab9b7e3da31220b873e355
-
SHA1
b9e5f9910e4fa87f51d4cca1a2a815ec3113b87d
-
SHA256
d4a6aed073ecaaa7c0cc112a41536f35d598d438c6600fe41e0ccff063df4f84
-
SHA512
70778d4ab04fb5ca5aac3e6f781ac09c5b1d791e729814c4c263c317b6f21271df8374d6fb256f27062fd3a38bf8630e32eb8d75099134ee7a2d242e0de3e87d
-
SSDEEP
3072:W7gx6GlYNI/vjxgm+oh9x66yVHmaoZGuWlnRuP2Q:WONlYQvjxf+oh91AYZGuWls+Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0355e47e8ab9b7e3da31220b873e355_JaffaCakes118
Files
-
f0355e47e8ab9b7e3da31220b873e355_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE