Behavioral task
behavioral1
Sample
f321279da0521f2ade08d6cc455d1eb4_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f321279da0521f2ade08d6cc455d1eb4_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f321279da0521f2ade08d6cc455d1eb4_JaffaCakes118
-
Size
74KB
-
MD5
f321279da0521f2ade08d6cc455d1eb4
-
SHA1
958df922819d9fb6ce768ce27c6d7733118496a1
-
SHA256
823b3c38682756d0d4f6319bb9b10531370f3d8815f484f08c742764b889c951
-
SHA512
39fd11e930a26da1d3e1205b0912661ec4ebfd622f553df719a8dff2fa122ab08388f8bfe7733957489608b053a14901a498e01ae5b3564ead2af3ebc8dd333e
-
SSDEEP
1536:92zmGfRgTm1vl58W9ILKs+UHo53/KCYOLARiAfLiVaKAuS:2mGfRgTm1vz87Ks+U43/V0fLi/DS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f321279da0521f2ade08d6cc455d1eb4_JaffaCakes118
Files
-
f321279da0521f2ade08d6cc455d1eb4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE