Behavioral task
behavioral1
Sample
22532d3e47f487dca3c870ab9ea76a21_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
22532d3e47f487dca3c870ab9ea76a21_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
22532d3e47f487dca3c870ab9ea76a21_JaffaCakes118
-
Size
150KB
-
MD5
22532d3e47f487dca3c870ab9ea76a21
-
SHA1
acc47daec889d8eb6ff4aadac78828203e623c1c
-
SHA256
f078ebfcc203e3a1f528e7132e05d0d219428e0c76b170e88d2e00b1752ca4e2
-
SHA512
146b9a150e8a300060239586c14a3da184bab0da42dec428d492d432057471f91faf752c5faf2bfdec93e7c1adcfda5da885151733e1dca274bd6c8255d9f280
-
SSDEEP
3072:0fapcADNesdU6o50TLP0ArjXLA7eaLi3YvQOZUKfzKzj25iXj:0Sp3D1dU6RL8AnXBaLi3YIqUyzyYiT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22532d3e47f487dca3c870ab9ea76a21_JaffaCakes118
Files
-
22532d3e47f487dca3c870ab9ea76a21_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE