Behavioral task
behavioral1
Sample
23fe9513afc308efe99820cd7aaa1f3a_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
23fe9513afc308efe99820cd7aaa1f3a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
23fe9513afc308efe99820cd7aaa1f3a_JaffaCakes118
-
Size
210KB
-
MD5
23fe9513afc308efe99820cd7aaa1f3a
-
SHA1
b4bb4b472b711b76140dc1035a47d5fc0801de54
-
SHA256
98c9807769cb6ab30c4e6851658c11e7a48a842454b9a9efd9549fbeb7c38c20
-
SHA512
6d89ba96b7b6b028b1983f372534ee6a944169eb4c8504bb7235affb51333aa96ca6718c1b89126fbfba521b1e59540921d2bac4a0e239f5430970f981afa010
-
SSDEEP
6144:E5ihP2u4kkmC98Z/0PT9MBbKnuGhOp5sP8v4hipQO:E0oqkmC8N0PT9CbIOp5Gcn1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23fe9513afc308efe99820cd7aaa1f3a_JaffaCakes118
Files
-
23fe9513afc308efe99820cd7aaa1f3a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 375KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE