Behavioral task
behavioral1
Sample
a1fd73d3f0700380b348d6009a0320c8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a1fd73d3f0700380b348d6009a0320c8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a1fd73d3f0700380b348d6009a0320c8_JaffaCakes118
-
Size
84KB
-
MD5
a1fd73d3f0700380b348d6009a0320c8
-
SHA1
9398c97d1483925efb74a44ce36af957f090e8c3
-
SHA256
dfa846570a259ff0cf0eaa7d9525f628399b4a703b7645f5637ab7564cafb3fd
-
SHA512
1f91cc719a66e22d036abb9ad9d7d3f1b279aec50929c27c0c654479dc952b783e6ac76d49085dbcd4c1fc1ed35b5074430d26aef01fcf3930f64f28ae65188b
-
SSDEEP
1536:YittMr6VasV4A2sydiO+dc80KXias39EUFh4w2Mvl2rDPeMQuL07Fc6:YiDMro+iOwxByj39EUFGkyPeLuoa6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1fd73d3f0700380b348d6009a0320c8_JaffaCakes118
Files
-
a1fd73d3f0700380b348d6009a0320c8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 385KB - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE