Behavioral task
behavioral1
Sample
17e56fabf4b35a9a0696d7ed72af746c_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
17e56fabf4b35a9a0696d7ed72af746c_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
17e56fabf4b35a9a0696d7ed72af746c_JaffaCakes118
-
Size
9.1MB
-
MD5
17e56fabf4b35a9a0696d7ed72af746c
-
SHA1
0b4ab5c1b517fb0b0eac3a5561820a8081a8b088
-
SHA256
c45cc69bc33e1a2a787611dbe63665d81e09ecfa4065da55ebda7516fd3f6440
-
SHA512
a7362e9582faec3a27f465c7aacf84af77ff4df78ad8ba9b774fd2184d7aa044fdac3329b95beba897af66dad8a03253ae1134c1fe7f71750c0c9fe77b1d3a94
-
SSDEEP
196608:i7effIPEsy58doQaTzwZ8Jq3QKnqVtxQw818dmXEQl1llLmiwIRq8doQKKMfyWvA:i7effIPEsy58doQaTzwZ8Jq3QKnqVtx0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17e56fabf4b35a9a0696d7ed72af746c_JaffaCakes118
Files
-
17e56fabf4b35a9a0696d7ed72af746c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE