Behavioral task
behavioral1
Sample
101dc94f61b639eaacfd8841563e1114_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
101dc94f61b639eaacfd8841563e1114_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
101dc94f61b639eaacfd8841563e1114_JaffaCakes118
-
Size
10KB
-
MD5
101dc94f61b639eaacfd8841563e1114
-
SHA1
31452e3bf6df56cf095e94adc57b532a9bf651bf
-
SHA256
d405038695601d296f962735e10aa26463457bd1c5e67d39c255ff69ad5c2cc4
-
SHA512
e2613aa9bbd7f9481852c25eb782810c1189c72d9ef8f093a9dc251e4d878bd0d2a2fda29bf3e3fe53a4241788ee90b05eacc3f8fdf23d4c912dd07858c26aa6
-
SSDEEP
192:OS/Naf4cRM7FN1Awcs/hAfDu1grKh4sPT0w/cfVtScxWiAp1G:OKNaQWM7FN1ApgMKh/0JfTNAa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 101dc94f61b639eaacfd8841563e1114_JaffaCakes118
Files
-
101dc94f61b639eaacfd8841563e1114_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE