Behavioral task
behavioral1
Sample
316b00e06c50413f0131be2ac527bed8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
316b00e06c50413f0131be2ac527bed8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
316b00e06c50413f0131be2ac527bed8_JaffaCakes118
-
Size
81KB
-
MD5
316b00e06c50413f0131be2ac527bed8
-
SHA1
60c1014a16c50f21d312725ef7c197a4eda75b25
-
SHA256
59bb9a40602f41b81593e669a744310eaf197c8b065343fc07f47f9374e0d720
-
SHA512
a852c1bf8825ac9b1316bbbd30698697d8780297c4f897c05f4ada9a572780f39c4aa6731f57457561b4f4d8450aa3e2d4e946d8f3333709847b69194d340975
-
SSDEEP
1536:emyewatzd8Sdiprobk4sVk9nj24sRGHEYjEBIn1z5FywwnVePUJynsjLgiZ:evewat5Vdi2bjWF4sAHFEBIn9LuVe8gI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 316b00e06c50413f0131be2ac527bed8_JaffaCakes118
Files
-
316b00e06c50413f0131be2ac527bed8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 5.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE