Behavioral task
behavioral1
Sample
72aa3c90c3dd1c060be021903cd02978_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
72aa3c90c3dd1c060be021903cd02978_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
72aa3c90c3dd1c060be021903cd02978_JaffaCakes118
-
Size
22KB
-
MD5
72aa3c90c3dd1c060be021903cd02978
-
SHA1
b317f748e85e114768b6dfa0356a186039b6fd42
-
SHA256
6786f1110010a434a982e019ac2965b1743df493cf30dd7702abd8080753b481
-
SHA512
ab5f5332cb8b29deb704b1be4b076db0d7cb3ad503521a046ba87b17de05bc523a167eff8cbe0ad4cb64e4f93ff0ccf81dcf2fa302551ee2549ffbb566c6abbc
-
SSDEEP
384:qECsibIgY4W9Jf4dX8JbD0YtE6pJUEEOJFj3UPwjRF41DspCwAaSuT35rkQ/JVm9:qEMbIgY4uAX85D0Yq6pKEESjUUE14ZZM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72aa3c90c3dd1c060be021903cd02978_JaffaCakes118
Files
-
72aa3c90c3dd1c060be021903cd02978_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 160KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 143KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE