Behavioral task
behavioral1
Sample
084562a1c346f8c39afcf185d4ba10b9_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
084562a1c346f8c39afcf185d4ba10b9_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
084562a1c346f8c39afcf185d4ba10b9_JaffaCakes118
-
Size
342KB
-
MD5
084562a1c346f8c39afcf185d4ba10b9
-
SHA1
83ca5984ddfc99b239802355b2395c8789041779
-
SHA256
390d34bbf7f20b97e993e15c4c744383843626b29571cc1afa3996486d58ff5f
-
SHA512
5434cd9103d13c1338e8b2277c8487be5644d3c38f56ea25e3ae94a465f3a56621494cd7854eb99715975641a330ce0c418cd8c4a1e44e495460137de84d6c94
-
SSDEEP
6144:zOigPStYZeMxvFtw+4D6gPgSSrhiQsNPHZdTWvEdrPUcyNiDKVTWoP7qPEu:zONStOeMxttwdWg7Ghi5vi8rMw2Woj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 084562a1c346f8c39afcf185d4ba10b9_JaffaCakes118
Files
-
084562a1c346f8c39afcf185d4ba10b9_JaffaCakes118.exe windows:4 windows x86 arch:x86
647b2d25b4821905b4195ff7a6455b54
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
Sections
UPX0 Size: 512B - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 339KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE