Behavioral task
behavioral1
Sample
223482f2d5d0e04e7f097b50ad737b4b_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
223482f2d5d0e04e7f097b50ad737b4b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
223482f2d5d0e04e7f097b50ad737b4b_JaffaCakes118
-
Size
1.2MB
-
MD5
223482f2d5d0e04e7f097b50ad737b4b
-
SHA1
45e027b531351a44e61a2ed83bd4aea5d8930664
-
SHA256
709b1839c50782ec87c7d045fa80d8be8a3e07d041d810970b71dc17f912785a
-
SHA512
ba8869a6f915960bf2a895361e3d2e1662c5fa1123a83e5f05d52b0eee9c898cf218533472e9b75f7121b76154da9e753595e2019de6131cccfe62b8aa84f89a
-
SSDEEP
24576:ctUMqhxt+LkTFoGohUaHBTUuxo6JoaxOczRk3kl0IfUTFof:ctUh3B2uaHBTUuG6HOc1okjUI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 223482f2d5d0e04e7f097b50ad737b4b_JaffaCakes118
Files
-
223482f2d5d0e04e7f097b50ad737b4b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE