Behavioral task
behavioral1
Sample
a751a85c181be28d3a146bfeb7e0d8dd_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a751a85c181be28d3a146bfeb7e0d8dd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a751a85c181be28d3a146bfeb7e0d8dd_JaffaCakes118
-
Size
42KB
-
MD5
a751a85c181be28d3a146bfeb7e0d8dd
-
SHA1
e3cee65d9727f983b961204504820c4ec72fdfc9
-
SHA256
d5dcb09814a28e840b8789e26004289302d9f5355a4e9388f3c622d7e36211f0
-
SHA512
58b3bfe6e3838a2c5ca83f5941e347109d8048b06d12871dfa9ce6f16db7052ee1a4c68539c5fe388a09b74d03ee5e3e2d1c6f529b69d53e6f99012a81ec8bd8
-
SSDEEP
768:0tSEjuBN2cxyhzStN76wZU/NvaB4kOep8e59KTJKclHBXSwSxxUqjPiuMc:0kEjWQG0St1NUcjOO8/KclhVAxUQq+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a751a85c181be28d3a146bfeb7e0d8dd_JaffaCakes118
Files
-
a751a85c181be28d3a146bfeb7e0d8dd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 544KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 802KB - Virtual size: 804KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE