Behavioral task
behavioral1
Sample
228913c35f183bf5492dbcd9fc9384e2_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
228913c35f183bf5492dbcd9fc9384e2_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
228913c35f183bf5492dbcd9fc9384e2_JaffaCakes118
-
Size
106KB
-
MD5
228913c35f183bf5492dbcd9fc9384e2
-
SHA1
f5fe6e2aab43a0d584969cf3de927d7a89b61ec1
-
SHA256
5a975760e04c519de304d488e47a305fbec70e323d37452d0a8a5cb5e78c8be4
-
SHA512
b8ca7222f614b0a6060c1d4c67a6b147e32821cc221f72f8a9e27a4ba5d96964440065ced6e2b03d66f0479ad29faaa11170d07b2aa36e815f76232db8d76ad2
-
SSDEEP
3072:ROZHsiDY4eQO+TCK4T67Z8qzw7XLk7fLO:MhsL+upToBs7gq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 228913c35f183bf5492dbcd9fc9384e2_JaffaCakes118
Files
-
228913c35f183bf5492dbcd9fc9384e2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 93KB - Virtual size: 596KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX Size: 91KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE