Behavioral task
behavioral1
Sample
0933836118d4ba06f4c07c05840a70f4_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0933836118d4ba06f4c07c05840a70f4_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0933836118d4ba06f4c07c05840a70f4_JaffaCakes118
-
Size
161KB
-
MD5
0933836118d4ba06f4c07c05840a70f4
-
SHA1
386c91a4dc28184fe0e04e3512fe2a326e47bc64
-
SHA256
63bdf18caeda59f30d22a0aab38927749d1453dfe413365dd12245c27519319e
-
SHA512
462ece1a22213ce8a9df6c0de59520dbc6017ccf0c7e7efd0471747ae3ae41aa2b617d5dead808ca61cad86a867b2ca41bf38fc704e753104d8ffe282616ccd2
-
SSDEEP
3072:6ugDneTwc9lb/ErB2U50v4wpevs2s4jlzu47vVqS8Zd5VTeE1TpWh:Ahc99/ErMUGv4wkLs4jxuwqS8RheE1Ty
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0933836118d4ba06f4c07c05840a70f4_JaffaCakes118
Files
-
0933836118d4ba06f4c07c05840a70f4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 424KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 158KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE