Behavioral task
behavioral1
Sample
24eb7fafa1f6b137c7beaec8ee3847d2_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
24eb7fafa1f6b137c7beaec8ee3847d2_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
24eb7fafa1f6b137c7beaec8ee3847d2_JaffaCakes118
-
Size
200KB
-
MD5
24eb7fafa1f6b137c7beaec8ee3847d2
-
SHA1
3501f920c8e13ccb74e6f83e146d18981ccf41d6
-
SHA256
ce21db945c8cacbc8086ba1f393b121e7d404f99c775a9f56636282ad7f9ec11
-
SHA512
f8af130a449e37fbeb7767e82f64e728e5cb20faca0b9461947b38df4de14a25690046f1a76989fc5fb5467b64318b909b10adebc48d14a572af8dbb19e586dd
-
SSDEEP
3072:56Q0WA96UNCPPUYgjCYjSU4ioX8cgi2xrLR8kvVnFmgmu1bMKCu6N4ZR0Qout56:VmZiPatSU4iqFW5nHLMKCuy4ZyQoSA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24eb7fafa1f6b137c7beaec8ee3847d2_JaffaCakes118
Files
-
24eb7fafa1f6b137c7beaec8ee3847d2_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 224KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE