Behavioral task
behavioral1
Sample
21f0373758e255d39bf1c44ed4e69668_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
21f0373758e255d39bf1c44ed4e69668_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
21f0373758e255d39bf1c44ed4e69668_JaffaCakes118
-
Size
274KB
-
MD5
21f0373758e255d39bf1c44ed4e69668
-
SHA1
5f19cf04e0e8141307bb2740389b0618230ec8c6
-
SHA256
39c8e112a6085bbf0f1fad39c4f72ffa40268100ed929a9aaa7f664747375b8f
-
SHA512
6838d275b936a6eef9bd882db8d270767c91816cbb57ffa77e4a80f68d5c3c2a9cd98cf58a6e4c230e687b377a218d5f9ebb53d1a59faa95d11f355b0e5dc03b
-
SSDEEP
6144:rEQAY3CpW+JgsZ+dTecU4aUjHzfm41w1Yt13wiNVC09LG6A2SYa37TK:rEQAYgWTu+0cUXw1wOt6ijCp2laL2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21f0373758e255d39bf1c44ed4e69668_JaffaCakes118
Files
-
21f0373758e255d39bf1c44ed4e69668_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE