Behavioral task
behavioral1
Sample
285e8222842a2cc009a2e24ed557c2da_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
285e8222842a2cc009a2e24ed557c2da_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
285e8222842a2cc009a2e24ed557c2da_JaffaCakes118
-
Size
25KB
-
MD5
285e8222842a2cc009a2e24ed557c2da
-
SHA1
8917bb1cacb0c7ca4512c1144a4e5b75b133d91b
-
SHA256
deea57d2baf46c1fef8b08492a90a4aab3a92003c1a67bd3fe3069deee6a4d63
-
SHA512
02c3a34fd4a449adbf00fe58a2e9439b774b1041771d4b675ff8ecd55340f6f753a7bef27722f5e36923a75e0e4928a1e47ff696a6ac54f28aeaa8af52e4e41f
-
SSDEEP
768:+yIaAmoMi/1TLZYDoOS/5i34QMKYw+886nbcuyD7UG:Plbi/Y1SR9QkwF9nouy8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 285e8222842a2cc009a2e24ed557c2da_JaffaCakes118
Files
-
285e8222842a2cc009a2e24ed557c2da_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE