Behavioral task
behavioral1
Sample
74726320357d472edc3ad1fe0de61614_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
74726320357d472edc3ad1fe0de61614_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
74726320357d472edc3ad1fe0de61614_JaffaCakes118
-
Size
54KB
-
MD5
74726320357d472edc3ad1fe0de61614
-
SHA1
4a1343e24c699524e608fc8ec4c26bd4ad21f98f
-
SHA256
45ce62e29f5b931887bac0ada81271f1e5699e7060229853d045adbd1c3eb294
-
SHA512
17480458c1b5cb5421ea85dd2a0a20a37c4a64d0c5a30ba04abe60d828d934a59dcaec9359ea065631abe7bf8014b0c5460b53a024851d3cfe25eaf023f4d582
-
SSDEEP
1536:b0DcjrMnRbbZtM4Fm7LdGvHQGYX0jx6Q3l6xm1X:b0crWHHRYLgB4Q0Sl6xo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74726320357d472edc3ad1fe0de61614_JaffaCakes118
Files
-
74726320357d472edc3ad1fe0de61614_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4096.0MB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nwc Size: 4096.0MB - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
XOR Size: 4096.0MB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE