Behavioral task
behavioral1
Sample
a14230d295fd8b9b6c370a12f4b2e12f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a14230d295fd8b9b6c370a12f4b2e12f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a14230d295fd8b9b6c370a12f4b2e12f_JaffaCakes118
-
Size
32KB
-
MD5
a14230d295fd8b9b6c370a12f4b2e12f
-
SHA1
b055b85eb5072abf80b065c1cfe07fa9b5d6da59
-
SHA256
479f8d4bc3c6549f79712ff19cb237202bc0a74f3efb4603416778e2a43ebbab
-
SHA512
964c970d399ec9e9eec8eb78fbf97d1b9c9cc07031198e167bbb39cb1c839522faf1fcd05daec3ee8fce7626087a1749d27020905f6727452b38f20ad30ca5ba
-
SSDEEP
768:tEn14NKJmtaztLf8Rgs4ZbD/rwpX2f3Px+FcEdgdcjNGBpsMcg0V:U1gKJ/Rf8R/4dEpX2wFcEfN8KMSV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a14230d295fd8b9b6c370a12f4b2e12f_JaffaCakes118
Files
-
a14230d295fd8b9b6c370a12f4b2e12f_JaffaCakes118.exe windows:9 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 356KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 215KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE