Behavioral task
behavioral1
Sample
213fd589119a6a449c65b78f490434d2_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
213fd589119a6a449c65b78f490434d2_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
213fd589119a6a449c65b78f490434d2_JaffaCakes118
-
Size
279KB
-
MD5
213fd589119a6a449c65b78f490434d2
-
SHA1
0d9e97d90da9c24fe152f4acd8d7564c2841c6d3
-
SHA256
1bb1a0a630ae43cd2274bda04e8ef3bde3947bcd7881c980b18bc4c493c2030b
-
SHA512
e9044b764ca51c8b77b961c9f20f9dee0997c8eaf6960bf4e21c379107ab5bd0b8dd30a9e6053be2649dc71959ed6194ed054938cd3131dbb9672b7655bc5adf
-
SSDEEP
192:W6V/uW2q6uiSq9SEnosk2sH/5yBVnlEcYB2F9glnn:LVWQ699voskF5yBxlnYBXn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 213fd589119a6a449c65b78f490434d2_JaffaCakes118
Files
-
213fd589119a6a449c65b78f490434d2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE