Behavioral task
behavioral1
Sample
23373a2d055100993fba51f7d95c659f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
23373a2d055100993fba51f7d95c659f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
23373a2d055100993fba51f7d95c659f_JaffaCakes118
-
Size
310KB
-
MD5
23373a2d055100993fba51f7d95c659f
-
SHA1
8b432f584dfd02fee6ea489228a9b26bacee0f5a
-
SHA256
01b48185bf6a8883520929d5ba86bd2a3ca69a9552fce4aec7194e4668107e14
-
SHA512
6c2b1e08b218fefac017031e3afa9a746636b75b11f99708153bd7871102c8a2a325fcf0c4ee33b46c9c547e3f194c110881e0fa4b549cbae43597b45f30ee54
-
SSDEEP
3072:sL4hEamVUap55KOAhR73GYkl2HaGKmVWr1Psn/BFrn5UI4hrnrnLHuvKG6:u4AnTTwRvk1E/BYhDuKG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23373a2d055100993fba51f7d95c659f_JaffaCakes118
Files
-
23373a2d055100993fba51f7d95c659f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE