Behavioral task
behavioral1
Sample
239012ae9a5a897c3220aa212abde190_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
239012ae9a5a897c3220aa212abde190_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
239012ae9a5a897c3220aa212abde190_JaffaCakes118
-
Size
166KB
-
MD5
239012ae9a5a897c3220aa212abde190
-
SHA1
5b956d2cd89ae3ad4795b2842426c9e152a3980e
-
SHA256
d54fe577303e1f190cff545f3d97ad46a96e1e37fde6cc4df72ed453415e25bc
-
SHA512
e77a28b2c456ce2eb433063bb18f8b0fc3b37471e4da23d969fe7d492d964b9b6a9a5cac201af1dd7024c67b9b8bec87fc77a00e47923e31d7813bed33a74742
-
SSDEEP
3072:FN6ylIM0HbFPURiS8o2DaKvW1IAMo7OWqVfXTjkAgVQHpfZe2uWKrc6rlQI3Vd:FvlID0X8o2DaKVAl6fjjlgupfZbKACnb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 239012ae9a5a897c3220aa212abde190_JaffaCakes118
Files
-
239012ae9a5a897c3220aa212abde190_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 158KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE