Behavioral task
behavioral1
Sample
223a6b487c6a674a2dc1f85db97d7dbf_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
223a6b487c6a674a2dc1f85db97d7dbf_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
223a6b487c6a674a2dc1f85db97d7dbf_JaffaCakes118
-
Size
17KB
-
MD5
223a6b487c6a674a2dc1f85db97d7dbf
-
SHA1
308a0230bbda6913477c5bf128d074b0efb6e609
-
SHA256
d4e62aea05116e675545d22309288440dc82e5d1700e86c2d82155038f0195c2
-
SHA512
091fe1c12ce170240e3e0e60f6f48d1324040ac9821a2c589821c21a6fd877ce07edf29849ab14a21a908e9ea4f5e6fabbbaedd8ba08a2a4e90ecb800961e92c
-
SSDEEP
384:lrKMvAecHYjLd5iGCnyOT+9becZPNPkQFIzr3EbS:l2MvAeDZCn9+VvPlFIzr0+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 223a6b487c6a674a2dc1f85db97d7dbf_JaffaCakes118
Files
-
223a6b487c6a674a2dc1f85db97d7dbf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE