Behavioral task
behavioral1
Sample
22328400c8f536b5bf64161a6b80a7f8_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
22328400c8f536b5bf64161a6b80a7f8_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
22328400c8f536b5bf64161a6b80a7f8_JaffaCakes118
-
Size
93KB
-
MD5
22328400c8f536b5bf64161a6b80a7f8
-
SHA1
b0eb7089a03a22ea1552a32cf74d4d92e93ddb64
-
SHA256
149489c811c52df2737f8912fa5e0b1f16684999315c2b436513eabe8af7fc7f
-
SHA512
727c26eb38b3ff5251952e63031f3c30ca117926773b7e4357a1983a46609abd5b785e4e7e1cd8e37b7fb0ea919a82aac4bb4a9c39d2e7d2fe82d1f86c05497d
-
SSDEEP
1536:HaNdMq2bqxuO9RQtJKAESJP9PdU93X19qg9Av9V+2LyCUx8FZH39FvaFPISEQ0+F:HaNC7+vsJK7pXjqg2HbLyVS13DO90+XV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22328400c8f536b5bf64161a6b80a7f8_JaffaCakes118
Files
-
22328400c8f536b5bf64161a6b80a7f8_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 282KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE