Behavioral task
behavioral1
Sample
0921ec7cbf469d553fcc80a0b1eba54a_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0921ec7cbf469d553fcc80a0b1eba54a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0921ec7cbf469d553fcc80a0b1eba54a_JaffaCakes118
-
Size
139KB
-
MD5
0921ec7cbf469d553fcc80a0b1eba54a
-
SHA1
19d9e6ac0d2c70120f81402c9c293f0a247022af
-
SHA256
ca65213436c96f0ed12674836f5ba099ba47a51be3f7eb010e8ba8cb88349ae4
-
SHA512
fb8c24e6c463ed7f922ab848c652a329917856cf23fc3f4b8e4e7de108a1f6f5952a8cfa0227b1a06b7afc24907257f0293208b76a029973265d6a1bdac1124a
-
SSDEEP
3072:Ye8jMCjM/keGyMYaKW6Y307R116ouVecMdlT0/m:YftIPaN33GP16oBxt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0921ec7cbf469d553fcc80a0b1eba54a_JaffaCakes118
Files
-
0921ec7cbf469d553fcc80a0b1eba54a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE