Behavioral task
behavioral1
Sample
22e23a2f48501c326789187ed0b67751_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
22e23a2f48501c326789187ed0b67751_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
22e23a2f48501c326789187ed0b67751_JaffaCakes118
-
Size
4KB
-
MD5
22e23a2f48501c326789187ed0b67751
-
SHA1
d038a24c3b702513db8fee41f358b80d5a48aa6f
-
SHA256
49d05b87a29c4f9bd65b928b12d72093672a0d2bba67146037c9f88499138ef1
-
SHA512
34e5179410d4ab12eb432201ee3fb1f9b0ce0ae42c0dcc11d78e019ccce920b55a3ba4d8a9b3ebfa16f3d55d54f78a5e2550860caa498f5f12350710922a38c5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22e23a2f48501c326789187ed0b67751_JaffaCakes118
Files
-
22e23a2f48501c326789187ed0b67751_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 639B - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE