Behavioral task
behavioral1
Sample
1b48c297bc9ef1cf7f6f12fa7bfce2bc_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1b48c297bc9ef1cf7f6f12fa7bfce2bc_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
1b48c297bc9ef1cf7f6f12fa7bfce2bc_JaffaCakes118
-
Size
272KB
-
MD5
1b48c297bc9ef1cf7f6f12fa7bfce2bc
-
SHA1
8ee9016198c90bbd672fb81455a7c4c46a05735c
-
SHA256
b819fb147b39d87069bf6873521ee298c89439921f42ff53e1151f4585a8ab20
-
SHA512
d32f7ff89acfb1cf7f081e0ecad8ab43977d60cbbdb12a23801dc03337b3e1baaf6927c6d410ac98cefd475ad0b5e5f5933935333ec0c3777f5947ce1cf64a65
-
SSDEEP
6144:bWl4+TWD+eXa4YasJzy2Xb3ZJ1FCC0sBoSNJ6OGlQZjcn44rR9:Kl4AWDTXAas3Lp90sBoSX6RQSn44N9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b48c297bc9ef1cf7f6f12fa7bfce2bc_JaffaCakes118
Files
-
1b48c297bc9ef1cf7f6f12fa7bfce2bc_JaffaCakes118.exe windows:9 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 165KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE