Behavioral task
behavioral1
Sample
f5031a1b6832c33564731f61634a526a_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f5031a1b6832c33564731f61634a526a_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f5031a1b6832c33564731f61634a526a_JaffaCakes118
-
Size
83KB
-
MD5
f5031a1b6832c33564731f61634a526a
-
SHA1
c1ff73caa661c75b553ccb8ae5d9d86ff7355517
-
SHA256
7e269d91be430a1dd3f6e68639a60ecefdd6561a129bc82ae11688429edeef21
-
SHA512
086279f3ddc08bcf32f19f458a2578d060b4c80c5b415e84dd4e83b91a83ca9cc2f3b8bbfc49a818c9bec9ccb8c5731183aef562859be1dd72b6e1b44dd48854
-
SSDEEP
1536:6o8K7/LOiH9DfY7P+E+Kzply3TaUR7BYxVHQqT3X0t6vmnL1+7hfbiG:6o8WjJA7mxKHyjawlkwqT3d0LwhfuG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5031a1b6832c33564731f61634a526a_JaffaCakes118
Files
-
f5031a1b6832c33564731f61634a526a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE