Behavioral task
behavioral1
Sample
221bfaaf2af64c13f7899deb20db1f7a_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
221bfaaf2af64c13f7899deb20db1f7a_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
221bfaaf2af64c13f7899deb20db1f7a_JaffaCakes118
-
Size
5KB
-
MD5
221bfaaf2af64c13f7899deb20db1f7a
-
SHA1
a60b4770ea505db2ac37d1ff2c4ad28155f1a032
-
SHA256
cf6253f7ad56572b5b6bd7a3639476f38a4c12495e6f3373f8af28c53d54725a
-
SHA512
6a9e1b3dea047185e905f82682b531081f183c11a4d2e98ad150a328febecda31b34db2928bc8e3df6848b2c0096ce3e73efd52743be68d0d6d5eba6c57447b4
-
SSDEEP
96:s6FIXp81/ikOrNXE5A4Mri38ccMgCxQYETQ1WI2xzgO+VIfO3GDL7:s6F+LXaAw3lmYETysf7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 221bfaaf2af64c13f7899deb20db1f7a_JaffaCakes118
Files
-
221bfaaf2af64c13f7899deb20db1f7a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE