Behavioral task
behavioral1
Sample
081c1e5ed823aadefaaa503414f4ef04_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
081c1e5ed823aadefaaa503414f4ef04_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
081c1e5ed823aadefaaa503414f4ef04_JaffaCakes118
-
Size
148KB
-
MD5
081c1e5ed823aadefaaa503414f4ef04
-
SHA1
74b176d0c89ead435b8e2011b1e93b4bc62ae20e
-
SHA256
c5e1857b40da47e69c702122a20e8f0327752d255e3515d4b84b2f31b2120197
-
SHA512
b99dca3af8e87c68e4b32c61ed3d21f4a5e2049a4c9c9fd32720bd33a2f0e0e6d5f128a78471c0b9d75ddf6c8d42675038c2f5280cacaa599904b66dace41d6e
-
SSDEEP
3072:DFtfwpSOl5yDg53IARqLQydfnEIjg03xVijlpR3oaYjkY+:DP6SOl8D80LQSnE+RXIpRYa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 081c1e5ed823aadefaaa503414f4ef04_JaffaCakes118
Files
-
081c1e5ed823aadefaaa503414f4ef04_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 144KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE