Behavioral task
behavioral1
Sample
1a7919c2fbda10f843d8cd4b4c6e6dfb_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1a7919c2fbda10f843d8cd4b4c6e6dfb_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1a7919c2fbda10f843d8cd4b4c6e6dfb_JaffaCakes118
-
Size
441KB
-
MD5
1a7919c2fbda10f843d8cd4b4c6e6dfb
-
SHA1
3fb673652ec0058aea0eaeab5b09ee0fc2cb1783
-
SHA256
1993fdd35b9cc64288e20a8a8ff137e38a114d8f240ef57c9f4588921a4896f0
-
SHA512
4a39e0f44b8c871b8b82f576e1cdddfe64eccdef3ac0b4eb54928a3574caa7d1d3624228e84ead4e67681821cf20946bef8aab92b02fe3af92c2f56322a56544
-
SSDEEP
1536:kLWMvU6O7Id1eBayDhRCceP10wegMDSAQKjdjW04fXihzBeZbSaEKc8CY0YRisn6:IvU6ARMMAWMsaEKc8ChYRisfNI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a7919c2fbda10f843d8cd4b4c6e6dfb_JaffaCakes118
Files
-
1a7919c2fbda10f843d8cd4b4c6e6dfb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 340KB - Virtual size: 340KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE