Behavioral task
behavioral1
Sample
1a5a6b630058879210f9de0724040227_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1a5a6b630058879210f9de0724040227_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1a5a6b630058879210f9de0724040227_JaffaCakes118
-
Size
490KB
-
MD5
1a5a6b630058879210f9de0724040227
-
SHA1
f50d952da124ada80af9c29cb7bf409818359fc4
-
SHA256
e9ab33d8c798d22420a4fda867f76900f911cf2123841592c19eefdc6594e32a
-
SHA512
707539e61f96f7b60183f882d5f1577fb032300dccacccec8e0b5c7d5150163ca681ec9884f46db05511efb79033909d09bc95c009370ec2708a501c5a7d821a
-
SSDEEP
12288:kAWfp419WoiQkjHKS8DU0L+wrI1APkETa8uNziSMPxdLRrvQzKowjGIKu9oVHrI3:Da4LC7jJ9XzKFUKWNZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a5a6b630058879210f9de0724040227_JaffaCakes118
Files
-
1a5a6b630058879210f9de0724040227_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 179KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ