Behavioral task
behavioral1
Sample
724caebd5ae195e8a5b056dc0d7a8024_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
724caebd5ae195e8a5b056dc0d7a8024_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
724caebd5ae195e8a5b056dc0d7a8024_JaffaCakes118
-
Size
497KB
-
MD5
724caebd5ae195e8a5b056dc0d7a8024
-
SHA1
7f2806c7552cfd7559086a1a3c4cda0a47f4833c
-
SHA256
2a0cafadaf3db3ab33979b8e267a83e6b0167904212b09af574b4cf1271f9775
-
SHA512
d30cec71c0bfea331fb2b9e652d9fbb3bcc23bd19b7ff82ae49aff195cf179b526619875d8a9094f66bb624898cd1e5d11d351b32a602bddb790ae9936da94a8
-
SSDEEP
6144:RPzMWObxTSHfZxcMayAvxIktLajGBITrqCKGLhieD5ak/ZlBvK2nGG36z9ICv8f7:RPzO6EyW1daPC2ck/ZlB2neEPHZaT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 724caebd5ae195e8a5b056dc0d7a8024_JaffaCakes118
Files
-
724caebd5ae195e8a5b056dc0d7a8024_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22.4MB - Virtual size: 22.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE