Behavioral task
behavioral1
Sample
157952587e498b971a7ea88de0ae2467_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
157952587e498b971a7ea88de0ae2467_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
157952587e498b971a7ea88de0ae2467_JaffaCakes118
-
Size
12KB
-
MD5
157952587e498b971a7ea88de0ae2467
-
SHA1
611c46eb909c8c1b200d65dd1a4aba34c04d369d
-
SHA256
73757049f97ab4422b33bd328c5faf9752db4df5d63b5024378c6c81bd97e0d6
-
SHA512
f4953a7492057505d91f7e1af1e2d115340ded319cfb07727524bf4bfc2f885a89f64e25a1c8ce460081a8db7b992e412d82a7edd6996c69458afeaf0a07acaf
-
SSDEEP
192:BAsvLqExiWW11/AHt1Qbv8mrCVeHgE+cG1X+UBcfN8+rrn72Vzhm:9rlW11oH4bLrCoHr+cnUBcV8+Dmzhm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 157952587e498b971a7ea88de0ae2467_JaffaCakes118
Files
-
157952587e498b971a7ea88de0ae2467_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE