Behavioral task
behavioral1
Sample
22c1871a52560874997fde84b751b54a_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
22c1871a52560874997fde84b751b54a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
22c1871a52560874997fde84b751b54a_JaffaCakes118
-
Size
6KB
-
MD5
22c1871a52560874997fde84b751b54a
-
SHA1
7e79198d40300335e4e9d4e958c7f7cc1fcee59a
-
SHA256
47f5c204e3c06a376f981cd6e7b1d3201c20175e8a8b3d86eb54cc00f712e375
-
SHA512
3b6c27d5842645431611a9d6f42aa6fe75e3558677734f399b202643af945f714ab74077b21c09edc725b48001718b8678568bfc4b929943ae3fb0bb52ca9a5d
-
SSDEEP
96:SY7XJN10FTWsQ8S347zN6J4g4jtpWmB/jxdMW+RSOv4pJz4jS0NKvSH/0M0W:N58FTWs5IQzgJ4NjRqAvyWSH/0M0W
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22c1871a52560874997fde84b751b54a_JaffaCakes118
Files
-
22c1871a52560874997fde84b751b54a_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 265KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE