Behavioral task
behavioral1
Sample
24404b435fd03b5a0682b40320af55b8_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
24404b435fd03b5a0682b40320af55b8_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
24404b435fd03b5a0682b40320af55b8_JaffaCakes118
-
Size
131KB
-
MD5
24404b435fd03b5a0682b40320af55b8
-
SHA1
b649362ade321eb10b7d4e3406866ecfb1400769
-
SHA256
ae8bae68b5e6fdcf13eae812bb64c7f2337df37e919f9aaadd63229f2d3175ec
-
SHA512
7adb92998372ff631d497a4a8fe2f3ead1ae065dfdf2c949189df2c8c2f16751dace7d70b5f357a85f38c95f2d8e8677278443e910bee7e62153fa591ea65923
-
SSDEEP
1536:B/Iq9bL2EEUZh7fgGHl+qSkqjxU+4qXsdbzNalaw5hRZyVZp6QyvaPrmXLmtOWH:9IWbfz8rnyVz0i6X6tfH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24404b435fd03b5a0682b40320af55b8_JaffaCakes118
Files
-
24404b435fd03b5a0682b40320af55b8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE