Behavioral task
behavioral1
Sample
16df2573d4974433b7011f3e08ae834a_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
16df2573d4974433b7011f3e08ae834a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
16df2573d4974433b7011f3e08ae834a_JaffaCakes118
-
Size
7.8MB
-
MD5
16df2573d4974433b7011f3e08ae834a
-
SHA1
75278f3915d40c45743e554361611ebb9c0d4a70
-
SHA256
c9e7fdbd176a78adcf9e5c532fa9646c5e77660fb6d4e28528a25593e3ca714d
-
SHA512
d88b507ed42ff7679684d80638fe46c7956ce60e1da23df178c67c1e4046671067de7d84afe3b06434ebcc3e15d481a9cbd64c2b6b402152e36e7dcd6d73a57a
-
SSDEEP
196608:i7effIPEsy58doQaTxLhQyZbIly38doQavqU/yE/QTI8B8doQpFqdfehQzonu9VA:i7effIPEsy58doQaTxLhQyZbIly38doP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16df2573d4974433b7011f3e08ae834a_JaffaCakes118
Files
-
16df2573d4974433b7011f3e08ae834a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE