Behavioral task
behavioral1
Sample
241912984c21fe1fcccee161bf9b0a5e_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
241912984c21fe1fcccee161bf9b0a5e_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
241912984c21fe1fcccee161bf9b0a5e_JaffaCakes118
-
Size
13KB
-
MD5
241912984c21fe1fcccee161bf9b0a5e
-
SHA1
be4a614e7d68df2d07bec25de762bd69463b92ad
-
SHA256
164fa9ce947302bf37a361cb8034441abb86649303bbc0c1d68fd3016f417a6a
-
SHA512
6d4f81160b38b39357efdc57581a6e0702cd283897d8e5537e28ba119f968a842a8c147d5bd1d327cb5d0fbf3c18d605ee47c6d940a786f3760a0c20b324ce1d
-
SSDEEP
192:aLJSmJ99m19L0msCqNXZuCXPuvMZ88Dw3Gz/2vdJguk:aUmX9K0mJWXg+fzWguk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 241912984c21fe1fcccee161bf9b0a5e_JaffaCakes118
Files
-
241912984c21fe1fcccee161bf9b0a5e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE