Behavioral task
behavioral1
Sample
24395fe062e41361c3ad7cb39d5ce7b6_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
24395fe062e41361c3ad7cb39d5ce7b6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
24395fe062e41361c3ad7cb39d5ce7b6_JaffaCakes118
-
Size
457KB
-
MD5
24395fe062e41361c3ad7cb39d5ce7b6
-
SHA1
e06d3aa292f0b9d00dc4b0cc0d5f159bd3417264
-
SHA256
721765fdc782369fb30d22b77d06baabcff1608dfd2c136a8c54d1635bc1aa2d
-
SHA512
f8d20f4b2f0d2802b1ff3898c710ca2a85199a96549d2c73d874eb3bd20e235aa02a80e8a802ff30f6e040bdfcb7a16afad2fd720d503839ae98386ab84d85ab
-
SSDEEP
12288:sQ1cutW/GclSFVslUTPRWDose4NeQvs3v2rGJjyy:sdutW3gVsmR7sepQ0+rD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24395fe062e41361c3ad7cb39d5ce7b6_JaffaCakes118
Files
-
24395fe062e41361c3ad7cb39d5ce7b6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 436KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE