Behavioral task
behavioral1
Sample
2224d684eafd6bbebcc394d821acc74f_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2224d684eafd6bbebcc394d821acc74f_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
2224d684eafd6bbebcc394d821acc74f_JaffaCakes118
-
Size
10KB
-
MD5
2224d684eafd6bbebcc394d821acc74f
-
SHA1
917c64a389f53976932fa644a5e2a177e8341c48
-
SHA256
f9801a132318401ed8373e0bd55160b31677def1a093e97f6fc8a383b3af29ca
-
SHA512
2ca44ab3898ead8cf604cdf1ee343fc8416b3db733dd8377703df2933dea4abb0d690821972061ffbba6426ab56988a96233f3a5dfbd58ed68409f4314347159
-
SSDEEP
192:RmxpXhVMBljpzxjJE1wqPJDbSSblEZXAJqZKHTFaNJhLkwcud2DH9VwGfctdb:RshVwlt8HPoxbZyaNJawcudoD7U3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2224d684eafd6bbebcc394d821acc74f_JaffaCakes118
Files
-
2224d684eafd6bbebcc394d821acc74f_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE