Behavioral task
behavioral1
Sample
655441872fd499a7c1caa440640830af_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
655441872fd499a7c1caa440640830af_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
655441872fd499a7c1caa440640830af_JaffaCakes118
-
Size
374KB
-
MD5
655441872fd499a7c1caa440640830af
-
SHA1
9718d3ca54a28cf39a87351af885e1a07e894a4f
-
SHA256
c357fd0f9e9fedb633313668aa511cc5b75db8385c72de3887cbdf89cff72db6
-
SHA512
e7ec78428284a3acce535d28924b5be1544c025dff5f7793019c453c5ce216488701e1bd1c9dc6d6234084b84738566ec61efc127418fe920925915ed02e4cce
-
SSDEEP
6144:zetwsW7hX5P1s2xz6tlXmBrjTGR5U5IHbrdYKD7VcrMxgE5vAz1uuq8nFN0ahYF:zhs4hX5P1sMAkBreswT+rMgUoz1uFmFn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 655441872fd499a7c1caa440640830af_JaffaCakes118
Files
-
655441872fd499a7c1caa440640830af_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 167KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE