Behavioral task
behavioral1
Sample
22c426d28b94eabc3fe90e29adb14237_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
22c426d28b94eabc3fe90e29adb14237_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
22c426d28b94eabc3fe90e29adb14237_JaffaCakes118
-
Size
522KB
-
MD5
22c426d28b94eabc3fe90e29adb14237
-
SHA1
7695c3ec6d7def95d94114d832974af13827656c
-
SHA256
449bc5079c88f998841eb654ef7418ace31d52c59dc5df764af8a9d2c7e1f92f
-
SHA512
1984e0d6fcf3aa8aade24c7651266ae4914b6b850462c8959109ce21062cbbe22e9408ab7e1ea3b8d91bc4ff2639f4b4cefe800403b7884fbb064e350d53064b
-
SSDEEP
12288:sYq+fRTyeIZmdiKrwBSeX5RMBRoP8DJ+5+W:sYqzZKroM/oGMD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22c426d28b94eabc3fe90e29adb14237_JaffaCakes118
Files
-
22c426d28b94eabc3fe90e29adb14237_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 707KB - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE