Behavioral task
behavioral1
Sample
0f399423f79a74d3d315ce37b199d828_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0f399423f79a74d3d315ce37b199d828_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0f399423f79a74d3d315ce37b199d828_JaffaCakes118
-
Size
32KB
-
MD5
0f399423f79a74d3d315ce37b199d828
-
SHA1
5f846839a87d2aeb83d2917486883aa6bdc38ef7
-
SHA256
2db085cd0abf0518ded6f69e65b383ea4543c73d61323703a96eeff467046069
-
SHA512
f9aea0972d9717ea258f6c2a8bb461fbab423f8d9c08732e44ed5a288849423b152191b7b4724b1534cba4d46c073c866e0a18a49b10b6bbead6ae86e461861b
-
SSDEEP
384:lm2Jn9dpXbf5vFzrABCC2N4ezyu4fJMaNJawcudoD7UOt44SFMP+gAp8IKZB:lm2nLpb5vZoHPJFnbcuyD7UOmVjI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f399423f79a74d3d315ce37b199d828_JaffaCakes118
Files
-
0f399423f79a74d3d315ce37b199d828_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE