Behavioral task
behavioral1
Sample
1691c04e9384c4ada31f5e4bc5bb4a9a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1691c04e9384c4ada31f5e4bc5bb4a9a_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1691c04e9384c4ada31f5e4bc5bb4a9a_JaffaCakes118
-
Size
240KB
-
MD5
1691c04e9384c4ada31f5e4bc5bb4a9a
-
SHA1
bc5f5e39bd45f57bdbdc0a3ae2831c538327c720
-
SHA256
d56ba56b48b395b7a141fbbd27fe992b025d8a9cad9804f56c49ec970819044f
-
SHA512
2cfd514c461d84192e9e1b3494a6c91708af7dac10a4a9b4e3514b1e8f11ebdba6787519cf51a7b912536af50cd1a08c158ebd23f1de9a1616a11a9ba32ab543
-
SSDEEP
6144:sGKWMb537+nHhI+QFDcnbRJNEx234kqFlR2mZU1aNoS9:WW8+nHhI+QNcb9gW4kqFH251aNoS9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1691c04e9384c4ada31f5e4bc5bb4a9a_JaffaCakes118
Files
-
1691c04e9384c4ada31f5e4bc5bb4a9a_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 236KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE