Behavioral task
behavioral1
Sample
051db474da2d8aac1b97afab606ee2dc_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
051db474da2d8aac1b97afab606ee2dc_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
051db474da2d8aac1b97afab606ee2dc_JaffaCakes118
-
Size
372KB
-
MD5
051db474da2d8aac1b97afab606ee2dc
-
SHA1
af91cf27695a2e101e745813e52b17ca5890db78
-
SHA256
c6468e4b427896094122b8d11649f727e65c125356dbb52cb706f1872c3c0590
-
SHA512
169f12f7be6bf2e50b749108f129d99c060b48b894164b916339aae16ae490df720841916cababc897643a13de68507bc76377b1ffdf1869f01c9d31ab885b4c
-
SSDEEP
6144:sTgKGSrPKWAzuuL3CU+d5TzlCAUVwPDs84B7ulxVffPVwOGwb09F64xjrA8r2kRY:s1TrPKpx3H+d5T5T484Badw+AtrA8Ckm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 051db474da2d8aac1b97afab606ee2dc_JaffaCakes118
Files
-
051db474da2d8aac1b97afab606ee2dc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 380KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 367KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE