Behavioral task
behavioral1
Sample
a024d4cbe960b6f3ade69a541c9605b4_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
a024d4cbe960b6f3ade69a541c9605b4_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
a024d4cbe960b6f3ade69a541c9605b4_JaffaCakes118
-
Size
118KB
-
MD5
a024d4cbe960b6f3ade69a541c9605b4
-
SHA1
ad0edff30fb7e5e162cb64ab094afa18522ffc39
-
SHA256
94db2a0266865b5a13ade01a3d7bba2bc9c4f4120b19b03f0c2de6af414cdc55
-
SHA512
94bbfe31649d473fad33b59434f156e5c5c4386e0e5d2d375738b02de32206cb31f73b5608b891b94352ffb1e8f92e8e5db215528ccb8aefb01439da43f32ebb
-
SSDEEP
3072:Xb2WuBYLPwwGIyTb27Alxv3BnWtOysQA6exGE994mTaOoiz:r7uBqRyvFxv4t7sQA6Wv1p
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a024d4cbe960b6f3ade69a541c9605b4_JaffaCakes118
Files
-
a024d4cbe960b6f3ade69a541c9605b4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE