Behavioral task
behavioral1
Sample
1a0fa8e753b6e62ba0f09261e6419945_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1a0fa8e753b6e62ba0f09261e6419945_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1a0fa8e753b6e62ba0f09261e6419945_JaffaCakes118
-
Size
445KB
-
MD5
1a0fa8e753b6e62ba0f09261e6419945
-
SHA1
72381f52d59b6125533ac4b531a65e5339637789
-
SHA256
981c9faf449efe313874b5381ec5ec7fcc173d8214d1ac71be14754f9d332aa0
-
SHA512
9aba55317fa163b8a420dd33e89c5fb237bea635a4e33c2a4d8169fd62bb3dcbdb34a13b7ddcaa5a530ed24e07cdde18e66a8f2e7d2d62a9c9e536dc252ec214
-
SSDEEP
6144:7gHXCFdoW/HotZk9K0C4mXE7EbmSIPzjZivhzO2PJehlNAI04Jl47sHvEh4Ujfz4:uyIIIzAClE7uDOch+h2ul/mJo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a0fa8e753b6e62ba0f09261e6419945_JaffaCakes118
Files
-
1a0fa8e753b6e62ba0f09261e6419945_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 732KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 409KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE