Behavioral task
behavioral1
Sample
191ba6277da6372361dd0d1233fcc310_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
191ba6277da6372361dd0d1233fcc310_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
191ba6277da6372361dd0d1233fcc310_JaffaCakes118
-
Size
10KB
-
MD5
191ba6277da6372361dd0d1233fcc310
-
SHA1
738fd304fbbfc6a422fe037a0cfa4c09ba0c32b8
-
SHA256
8ca0308df38d89c759006c71bbd931fce4e395d992e5897e0b1295b6709a256c
-
SHA512
2ef2d50e317dc11523994783aac43439a60924f1261f17c035608ffb481205af48d88bf5f0c315233028c83f07bc29062b7919a8121d8535f759640b22fc00b2
-
SSDEEP
192:imwX905joEqFDJMVw5ZcMpmS13qc/HEmx8dNR0E0:inqOEqRJL55QDMIJK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 191ba6277da6372361dd0d1233fcc310_JaffaCakes118
Files
-
191ba6277da6372361dd0d1233fcc310_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE