Behavioral task
behavioral1
Sample
2470b8963a9653d49412b83a48d2c9b2_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2470b8963a9653d49412b83a48d2c9b2_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2470b8963a9653d49412b83a48d2c9b2_JaffaCakes118
-
Size
391KB
-
MD5
2470b8963a9653d49412b83a48d2c9b2
-
SHA1
11e5732703e09c6d304455fbda356d47710dad37
-
SHA256
02df641c76450be87a90a776c790e0ae1ac715f8bcffcd2ec9dc60ba25c7d54e
-
SHA512
16e471aebab4a46abb212b09ae98be1854b9227ad5dbedce6fd1a348142e5afc36733ccdba7d5868acdb557c65a50f36859090678b47d70742964419e9e313f5
-
SSDEEP
12288:9LBYhMl02b8L6NTrdsMXuvU7eCixQ20pP57N1gu:9Nr02bhHsM+c78t0Xzg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2470b8963a9653d49412b83a48d2c9b2_JaffaCakes118
Files
-
2470b8963a9653d49412b83a48d2c9b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 796KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 387KB - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE