Behavioral task
behavioral1
Sample
18c547a2a8787097013d627b5e7c9744_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
18c547a2a8787097013d627b5e7c9744_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
18c547a2a8787097013d627b5e7c9744_JaffaCakes118
-
Size
1.6MB
-
MD5
18c547a2a8787097013d627b5e7c9744
-
SHA1
fb3f1de690a0a74262ac788b53a11e0e7f9f0ca2
-
SHA256
0ab6fa049a8c182911c6ab3574a1dbce8ce8945b2f569a9e81674a4dd5d4a2af
-
SHA512
7febe5f6c1fc46f4cdf10feca93288934e6e8db43f6dd10fefa080df6ecada09a85096aae7afccb61c896ba9d1481a53d703faa0c484195c3d360effb31a7872
-
SSDEEP
24576:qThBQYU6JY1s7SKIhkTql0Vp+zKgKUZ7tRI2Guxa42Mf:qoYyoIiUZ7/I2Gu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18c547a2a8787097013d627b5e7c9744_JaffaCakes118
Files
-
18c547a2a8787097013d627b5e7c9744_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 492KB - Virtual size: 492KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE