Behavioral task
behavioral1
Sample
2456f9472c7a865e3acf9b9cf230f1ea_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2456f9472c7a865e3acf9b9cf230f1ea_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
2456f9472c7a865e3acf9b9cf230f1ea_JaffaCakes118
-
Size
99KB
-
MD5
2456f9472c7a865e3acf9b9cf230f1ea
-
SHA1
6b45d15e4d29277953ab82ca6b98d2ee074d7796
-
SHA256
617042bcc34682937928f9a29ba45ceaa63e5d89a38c90bb4920afc67ccdee45
-
SHA512
0f9f92713a5e8e6b0f9b63bbb141c3f5847edf8f19fa954b2319ca1ce718df6857cca2e6d929bc6470f99c7c42f3925079450177b6ed748d2b5cbbb6024eeca6
-
SSDEEP
1536:eBNWj4vIQhcaWqGMSoFlAKd463LvykYX09Tli0nouy8G53/KCYyL8RiAfLiXaKJw:rjKhcxhoFljkODouti3/VcfLitoz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2456f9472c7a865e3acf9b9cf230f1ea_JaffaCakes118
Files
-
2456f9472c7a865e3acf9b9cf230f1ea_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE