Behavioral task
behavioral1
Sample
229f6582a789b942678e958bcd191832_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
229f6582a789b942678e958bcd191832_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
229f6582a789b942678e958bcd191832_JaffaCakes118
-
Size
311KB
-
MD5
229f6582a789b942678e958bcd191832
-
SHA1
c4a34f262376e5c1ca48f7c338af36d1e44dfa6e
-
SHA256
80aa6b54f6bbfe061d6c2b815073bdb9a8273dd7e43c6ae1f3b8ccb9a02bd155
-
SHA512
03d938cb20150a66a705c95638fb16001abeb3f449c4dbc72c853c7256989bd980a7b24e7dc59b34e5ac7dc4553b76b4a731c8752d3a59b0dcd2b1171a32ee71
-
SSDEEP
3072:9LRUJU+1l8nSCXOKcSZfuj014yxCAeEYs9a3nGtg0d50pnjdWsCbcNJL+HWsIz0O:99IU3SCXOM31Gs48xmj0sFNJL+2D
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 229f6582a789b942678e958bcd191832_JaffaCakes118
Files
-
229f6582a789b942678e958bcd191832_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 376KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 168KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 142KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE