Behavioral task
behavioral1
Sample
a2371f667a58cc35a9ff799809911965_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a2371f667a58cc35a9ff799809911965_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a2371f667a58cc35a9ff799809911965_JaffaCakes118
-
Size
1.9MB
-
MD5
a2371f667a58cc35a9ff799809911965
-
SHA1
21e90d47ccbc24361e306bd014c4708693b15c8d
-
SHA256
45716a45859d6225ee8865117c88cfbb6840fe81ccc2f900d03f5a9b68eb48c3
-
SHA512
d45138b5e2ba247893d60fcab4f18d55b424c28abba6469f9cce0de7fa7e85a2449cd8181371c230ab26529c1503301e1fff0152ee6448f54ca367a7cec3ad16
-
SSDEEP
49152:VCxDNytI1zLnrAPIbYB8Rca/il/X5U0G4RC6qFjlcKcAs:VCatIgGrccAv5U0TwcKo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2371f667a58cc35a9ff799809911965_JaffaCakes118
Files
-
a2371f667a58cc35a9ff799809911965_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE