Behavioral task
behavioral1
Sample
16516fc7acda4b2ffed260b14aceedfe_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
16516fc7acda4b2ffed260b14aceedfe_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
16516fc7acda4b2ffed260b14aceedfe_JaffaCakes118
-
Size
1.6MB
-
MD5
16516fc7acda4b2ffed260b14aceedfe
-
SHA1
62a3308bddf7bdc87b36df943b97ae4738c10e2e
-
SHA256
4615e392bb8f7e44a9298628543a67da14039b48026b56fb349ae998b4f70aff
-
SHA512
3945a58f260f6a1a48b70218e245b962e197e881a0121788626839c04bbcd766949bb41c288ce2046a83cba038cc9725f5307a9f88c0edaac067e3a7bdf4313f
-
SSDEEP
24576:fVA9uf+RMvzt7kU1LGqZtDcU0JqM8cbMhxLPdneTko6wStxOItyw4qGJaLVW89:f4uvzpH15OUu8cYhJVnqywS3jgqGJa9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16516fc7acda4b2ffed260b14aceedfe_JaffaCakes118
Files
-
16516fc7acda4b2ffed260b14aceedfe_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 987KB - Virtual size: 988KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE