Behavioral task
behavioral1
Sample
24c4ac8f7ec2fbd4b315b9738fb78581_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
24c4ac8f7ec2fbd4b315b9738fb78581_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
24c4ac8f7ec2fbd4b315b9738fb78581_JaffaCakes118
-
Size
53KB
-
MD5
24c4ac8f7ec2fbd4b315b9738fb78581
-
SHA1
cc3ef8bde2a567e98ddf83a93fcee8abbade88de
-
SHA256
8b0d1feb73881edb9c272f4bd33d5dc5ebc16880b82bf0f36827ab6bc594cdb3
-
SHA512
82ff41d9022b2fe9bbcbe6d4baf41b66885e37a953a95c11eea93cc0d0e0712406a39007da932a00721a83cf8a529b0ad6a91ad54f67763f0870a8a886f40376
-
SSDEEP
768:SG4VQwb/cWeSFVFrvC2m3msDwjer7Fb+KsUbq4bwj3FZ2zL+T1owakVu:Hk5zrT5er7Fb+KsFIwLFZ2zCew5A
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24c4ac8f7ec2fbd4b315b9738fb78581_JaffaCakes118
Files
-
24c4ac8f7ec2fbd4b315b9738fb78581_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE