Behavioral task
behavioral1
Sample
892f20b754fd13f918bc91ce0afb0015_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
892f20b754fd13f918bc91ce0afb0015_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
892f20b754fd13f918bc91ce0afb0015_JaffaCakes118
-
Size
261KB
-
MD5
892f20b754fd13f918bc91ce0afb0015
-
SHA1
5a6c5c2eb65c996e6a6876b397534b8f109a0a80
-
SHA256
4fad5e4743410c638ad9e24b808fb6ceedca1b4cbb38a5bcbc2ea9ad5eefeb88
-
SHA512
b7882bff0778c0534a8b8a60752952ef2e5645f6c07db14b712057dc32906106864ec84110644a4c0066776f6c04fa35568f88cb0bb40af017f3e80c499d3b11
-
SSDEEP
3072:D1vDwLe0lDbVlH1EHHrNqua01dvKu61T0ExFk:DJshHSnBtagvKu6lxF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 892f20b754fd13f918bc91ce0afb0015_JaffaCakes118
Files
-
892f20b754fd13f918bc91ce0afb0015_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE