Behavioral task
behavioral1
Sample
1a18b7735c88410190f9a39863470af5_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1a18b7735c88410190f9a39863470af5_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1a18b7735c88410190f9a39863470af5_JaffaCakes118
-
Size
195KB
-
MD5
1a18b7735c88410190f9a39863470af5
-
SHA1
949ab8a89f1a84903ae88fc1ab86e7be54ea4e93
-
SHA256
37ab477bd0e822b338e48675d4c3f081e21b312497b75e3ec190c22d0884b11f
-
SHA512
aebff99d6db597c0ad382fa4f700915e5364f75870afa17e76686c1c12d0e28888cbb6a63693d75df35a85a4cd702e41a5acee3c7d444cb5ac784bc3f124c5f5
-
SSDEEP
6144:0wO1AIx52V8r4abIsrTf5Pd+WVhxx4o8P8G:0Lx56SPbBJsWDH8U
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a18b7735c88410190f9a39863470af5_JaffaCakes118
Files
-
1a18b7735c88410190f9a39863470af5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 340KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 186KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE