Behavioral task
behavioral1
Sample
275225ede28e5ab24c2d81a75f45a373_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
275225ede28e5ab24c2d81a75f45a373_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
275225ede28e5ab24c2d81a75f45a373_JaffaCakes118
-
Size
390KB
-
MD5
275225ede28e5ab24c2d81a75f45a373
-
SHA1
459be7b6847ed967478684ce9281108601d31118
-
SHA256
4f74434ce651f8ccbfdeb79c4eb5c1415f0d4473d8bd2672ff4ddc7412ed77dc
-
SHA512
3f8b5d5d60c382263f93b4ac0875b7f83ac605cbb953f22a9a579a02e5b9522b913eab1718f64d532cf3480e6b9790c29040633792961c261ce30ae11aedf1cd
-
SSDEEP
3072:whrpI5bLOXRd2qrQrR+ATcxGOgIQB8oX9LjN8oDQS3HpcvPMGbXEUb/mTWQBhXvf:wzIJLOSbDOAHC3MOEU8ibnhPaa0iT2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 275225ede28e5ab24c2d81a75f45a373_JaffaCakes118
Files
-
275225ede28e5ab24c2d81a75f45a373_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 228KB - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 150KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE