Behavioral task
behavioral1
Sample
21cef27d077cb2d81579dacd09ee509f_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
21cef27d077cb2d81579dacd09ee509f_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
21cef27d077cb2d81579dacd09ee509f_JaffaCakes118
-
Size
202KB
-
MD5
21cef27d077cb2d81579dacd09ee509f
-
SHA1
9f670d28b5e10598b9a093fdf6ac8b04357e1725
-
SHA256
d1a136cd440699d87ab2994b78d4b0fb97185ed4711645e5439c31325d87d3c4
-
SHA512
0b9dff81b1995f35407e15313ec6601d708aa7ac651563b539149254459c98e0a61e805e5a50abe82d2f98728fd8ec70cb1ac762db1ad65e6ecbd069f693c227
-
SSDEEP
6144:xMdp++gV65MAksAGcof9LuZBcadDjk+CRsc+:xMm+m65MXsAGBLUc2k+CR8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21cef27d077cb2d81579dacd09ee509f_JaffaCakes118
Files
-
21cef27d077cb2d81579dacd09ee509f_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 2.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 514KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE