Behavioral task
behavioral1
Sample
302223cfabfc13f651c3a71c76a48258_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
302223cfabfc13f651c3a71c76a48258_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
302223cfabfc13f651c3a71c76a48258_JaffaCakes118
-
Size
29KB
-
MD5
302223cfabfc13f651c3a71c76a48258
-
SHA1
006d7b8b0cd5392ac554587b477a33da317db341
-
SHA256
a674e097cb6f592278cb0178e64738a20f870ff4f553bbfc371694b1badaeb7d
-
SHA512
0bb628e362889152bae9de6c0af8cfda0a1ea19d667be8c397c21b3a3bb2535b25e3af2c944cd14d6a3033a575caace57d56a2945d75127b8c12dedaf8037df1
-
SSDEEP
768:QeCWQaDdmUrby9pmTZT5O1JEbQbD7Hgz3DZDIA:QeC5aDQ4bTFSTDkzTZ8A
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 302223cfabfc13f651c3a71c76a48258_JaffaCakes118
Files
-
302223cfabfc13f651c3a71c76a48258_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE