Behavioral task
behavioral1
Sample
024bdc0634cceea3c2948d670ba8a810_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
024bdc0634cceea3c2948d670ba8a810_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
024bdc0634cceea3c2948d670ba8a810_JaffaCakes118
-
Size
169KB
-
MD5
024bdc0634cceea3c2948d670ba8a810
-
SHA1
41e722c4761aeb1ecabe11e0744e62cf952bf4f9
-
SHA256
7744b0c53443a95e9246f27b46c3fc4a8dbe40a40246e5885ab46bbb19b0017e
-
SHA512
cf2d1c125eb46af0600c1d0573d2150d4c608fdd7ca44f84679974e9498c449fbfb3dcfec62c2209e17a20159292dda7efd31658d94841b36341063c534bcbad
-
SSDEEP
3072:6oy8j7VnNdrPHaSekwi+mWB1V0out2+5cU53oGu8KM11KPzHpO7Jv:q8jZ7rvaU3+mWB8oS2g54YKyECJv
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 024bdc0634cceea3c2948d670ba8a810_JaffaCakes118
Files
-
024bdc0634cceea3c2948d670ba8a810_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 106KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.5UPX1 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE