Behavioral task
behavioral1
Sample
f582c4f62472e9e3a46db4513a0c55d0_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f582c4f62472e9e3a46db4513a0c55d0_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f582c4f62472e9e3a46db4513a0c55d0_JaffaCakes118
-
Size
5.7MB
-
MD5
f582c4f62472e9e3a46db4513a0c55d0
-
SHA1
5229c5ff2bab8b4654ac3b4231338eb87844855a
-
SHA256
43f4bff4de17cf56537aaf5d9aae3aa984f5e1eb20428b0eb8df916e64a12db2
-
SHA512
3dc481de9c8a3e839528af9d4f41f070bba2b1ffe7dfe2e0caf18de6c840234b22895d3fd0e3fdf084a0912851bb1f2d5724e214f955cd194e2e40a113d67c42
-
SSDEEP
98304:nQDk8IxSjMyXwieDplF4IpfGip4Ek5owvBvD+MvK1HvlT+w9bXhKP6LRoYy+Uc:n6uSzXwblG7iJkocvD+F39bX8MJUc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f582c4f62472e9e3a46db4513a0c55d0_JaffaCakes118
Files
-
f582c4f62472e9e3a46db4513a0c55d0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 128KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE