Behavioral task
behavioral1
Sample
f324af06f09555f465c08bbeee313852_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f324af06f09555f465c08bbeee313852_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f324af06f09555f465c08bbeee313852_JaffaCakes118
-
Size
53KB
-
MD5
f324af06f09555f465c08bbeee313852
-
SHA1
958c27e85afc31fb291e82cfb1b73d028ddb6c69
-
SHA256
77e295680fe96690306d1f8b6136c4c7a1be7141ac176687a08e201f6f273101
-
SHA512
be7c881e962b02419d09dac96888cce8131f59a6c72a05a55c50d506fe89860bed8fecac278956dc3f3d94251e3eb1229a840c42b927c2eddcbe3fb6213199fa
-
SSDEEP
384:NVuTMyNcxzkYz0BoiIx9MY7yV8oaX2clU/9Cj34vNPZsMk8RDggH8J7iWY4:NDhxzkY4BoiIxp7ymcclLjeNxdN9H8Jx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f324af06f09555f465c08bbeee313852_JaffaCakes118
Files
-
f324af06f09555f465c08bbeee313852_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE