Behavioral task
behavioral1
Sample
2290e4791fac0f469ea6a3d58fea64ad_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2290e4791fac0f469ea6a3d58fea64ad_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2290e4791fac0f469ea6a3d58fea64ad_JaffaCakes118
-
Size
136KB
-
MD5
2290e4791fac0f469ea6a3d58fea64ad
-
SHA1
f326607e0355af44958937cb8d1f92b20de128d2
-
SHA256
4bdf77d8a8059012709b1cb98585c8e80ddeae97731c11ef6cd828f4bd9c5fa4
-
SHA512
59647863abf1bc93d72db7c2c737f73c6f4388578da1f6907df08c928d658899e431cc38fa79ea50d59880866673ab1226b93799a6d1b1febe6a78e2a1579559
-
SSDEEP
3072:/Wuyq+DphTWLWfIo4Z23BCERu9AJTGd5:/Wuyq6WLWf14Z2xPRuGF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2290e4791fac0f469ea6a3d58fea64ad_JaffaCakes118
Files
-
2290e4791fac0f469ea6a3d58fea64ad_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE