Behavioral task
behavioral1
Sample
72e058e43ea815292efd7815c4622121_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
72e058e43ea815292efd7815c4622121_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
72e058e43ea815292efd7815c4622121_JaffaCakes118
-
Size
253KB
-
MD5
72e058e43ea815292efd7815c4622121
-
SHA1
c0ea1ec369f90434ceb4d91c1ee919bb6ca225b4
-
SHA256
2d33df2892f55885c5f1150d1ffb908efa2d1aab466fcb27b5c0de5ed97da8d3
-
SHA512
306e14d0c1e70d09b6652cd1f1af76a54fe02e1916c711a8e708b2ca4466cb7f964de49996768ac4b36fe40da8c5b3e1bf5fc2f23b9f3b4af62fdde1ba741828
-
SSDEEP
6144:Dk4qmhaPSRDvkAdl9o+7hHaXSUvknea+wdZ:4912vkQPHyLIeaZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72e058e43ea815292efd7815c4622121_JaffaCakes118
Files
-
72e058e43ea815292efd7815c4622121_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 280KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE