Behavioral task
behavioral1
Sample
75921957b7f78858c89b9a20e024617d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
75921957b7f78858c89b9a20e024617d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
75921957b7f78858c89b9a20e024617d_JaffaCakes118
-
Size
73KB
-
MD5
75921957b7f78858c89b9a20e024617d
-
SHA1
23b268d9927e74430193924a927ad25f1ff45971
-
SHA256
76ec0df8b8140f04c33b1b58cb762e8ae1fcf6c28b213c15a8c2c78efbe8a13d
-
SHA512
59b0c32481dca5be3045b8a46b4ab2937dc2bad24c83309685367a6348fe5dc40e3caecc88d2119ef186e80e933abdaf96b5aca034e27a6fa4655fff0bca96d7
-
SSDEEP
1536:+vwIMUkn5lRjATpx6GWT4T/aj6MrNahdNc3lJZzIpGT5CpEn:sJknVKucT/uHNahvALIpm5aE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75921957b7f78858c89b9a20e024617d_JaffaCakes118
Files
-
75921957b7f78858c89b9a20e024617d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE