Behavioral task
behavioral1
Sample
56b9355725c2b95da78312d1f1f77cbb_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
56b9355725c2b95da78312d1f1f77cbb_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
56b9355725c2b95da78312d1f1f77cbb_JaffaCakes118.exe
-
Size
1.2MB
-
MD5
56b9355725c2b95da78312d1f1f77cbb
-
SHA1
e16ab11bc8f804a5e4b95e2e30f79d8a12789f53
-
SHA256
0b553d6fa992ffadd933245229ba575d361b9da787f28a1ca83d3e8679761efb
-
SHA512
5ecb6c79aab2f5dcda9d235c4553980402af6b2bda5630d73f1a234da1f88cce8d4eb70ede24cf8641285995c925827a63e0225bb3691e0b8d8bced277f033f2
-
SSDEEP
24576:V3p2LwNUuZ5c2nHqJhCKngL+C1Z6PhsdFYXYL1DQ8RSftVg4l5:ZLUu7XqJHf46PkF8q+dP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56b9355725c2b95da78312d1f1f77cbb_JaffaCakes118.exe
Files
-
56b9355725c2b95da78312d1f1f77cbb_JaffaCakes118.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE