Behavioral task
behavioral1
Sample
162a5d7fbbb2053335bb79fbd7e61f2c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
162a5d7fbbb2053335bb79fbd7e61f2c_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
162a5d7fbbb2053335bb79fbd7e61f2c_JaffaCakes118
-
Size
161KB
-
MD5
162a5d7fbbb2053335bb79fbd7e61f2c
-
SHA1
3c33216806cc3be56e668ff5bdec1a650eae8dd6
-
SHA256
1c3e7f6072a5acd0bab5cacbe1214e1b7e5cf1a450831993d02734c0e9d44216
-
SHA512
e688a5a0c7eaf48fa4c5aef120ad1b2fb6d058d7d92e9d2f04e82bf23606ca17fa82c22e409f8b55b9377ec5181d0ad7184e75e03cdd18fefd56eb8251d3f2ea
-
SSDEEP
3072:sK6cShRzSQO3kMw6n3EdWO2lO+6JOnYKdTNI+CeIZmy:siS5q0tWO+6gnY0TN1CeIZmy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 162a5d7fbbb2053335bb79fbd7e61f2c_JaffaCakes118
Files
-
162a5d7fbbb2053335bb79fbd7e61f2c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 707KB - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE