Behavioral task
behavioral1
Sample
216423faae4bfabd0d4009042e535204_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
216423faae4bfabd0d4009042e535204_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
216423faae4bfabd0d4009042e535204_JaffaCakes118
-
Size
390KB
-
MD5
216423faae4bfabd0d4009042e535204
-
SHA1
6b0cb2598c0399c259ab0661b89713d64914096c
-
SHA256
1304234a068ab5db287fe2551e2a68ed5b375dd022f1b6b4b57199029228baee
-
SHA512
b22295f8f6c885047b8d6c3b87587fcdd404d61f764717da3e1cd39b86a0003eda1895abc4d8851af5b82efc76cf24b98b4187986fada7cb3198d72fa8e8e815
-
SSDEEP
3072:Cdo7o1RGKzOR/0Zv3E/CokKjLWlBXVLgwihmlw2XQJGnAlDjOb9aouts3A:fo1RGKzz8/C/BlJijYQEAnkaoSyA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 216423faae4bfabd0d4009042e535204_JaffaCakes118
Files
-
216423faae4bfabd0d4009042e535204_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 320KB - Virtual size: 320KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE