Behavioral task
behavioral1
Sample
a0189efb13a38af964d38c1d5f504ea4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a0189efb13a38af964d38c1d5f504ea4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a0189efb13a38af964d38c1d5f504ea4_JaffaCakes118
-
Size
242KB
-
MD5
a0189efb13a38af964d38c1d5f504ea4
-
SHA1
66d3e1043794ed380bff79581373014d2186eb72
-
SHA256
d78657c61c5b2ec206ab7ca3d95184411e35b1416b921c0748e961ed140f030e
-
SHA512
882c4a27ecdb4e41fe0dc45776a8619263ee89240d8e35c163654b55e3a03ea5d32464dc3b11ab8b1a1f0ea21caa5faaf66588741564b06fe65a00434932b5df
-
SSDEEP
3072:2HHONFId+ksG0h8qqXi9FlHCTqoutDXdWj6VFgtqICmtD7p777777mG7F/Y:cnd1sGDqR9JoSO6VFcq71mK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0189efb13a38af964d38c1d5f504ea4_JaffaCakes118
Files
-
a0189efb13a38af964d38c1d5f504ea4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
��ŧ Size: - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��ٰ� Size: 183KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE