Behavioral task
behavioral1
Sample
a1e0c2b47720aafef2a02c579a71ff2e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a1e0c2b47720aafef2a02c579a71ff2e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a1e0c2b47720aafef2a02c579a71ff2e_JaffaCakes118
-
Size
174KB
-
MD5
a1e0c2b47720aafef2a02c579a71ff2e
-
SHA1
443b0d7bbd77ca49ffb3c4f734428c3236497a06
-
SHA256
2dcd2950092d63b717d785f39b917fdf24e4cec0872f98f799be8b94b0db83ae
-
SHA512
88de048ad8e5468d48fb14ecc9304611de53b015f6d6650cb2b590da8384833978e089aef6b0ee27aa017a3aaa3b9322a084bd06ddbf6a7048e5dad5d88bc8b4
-
SSDEEP
3072:cxnUIXOjR6IRfCtsKXP/uRviXiks2VL3nff+ay1q5dtmaC2FhJmzYTrzJI:IVXuRnksO4b8LXf2LqHtmaC+88z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1e0c2b47720aafef2a02c579a71ff2e_JaffaCakes118
Files
-
a1e0c2b47720aafef2a02c579a71ff2e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 152KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE