Behavioral task
behavioral1
Sample
a91643d5a14262ebfd6d277105423d3f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a91643d5a14262ebfd6d277105423d3f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a91643d5a14262ebfd6d277105423d3f_JaffaCakes118
-
Size
452KB
-
MD5
a91643d5a14262ebfd6d277105423d3f
-
SHA1
58be87ddd2f2f36e6fd1db871d879af469d1d700
-
SHA256
70b4108a28b2fea8f8c276b894fba026ae013e8aeddc56b15c02eb5f0955c45b
-
SHA512
ca6333e16d000a49b1d05429bf8d03c63ddcc3ba6bf9280bf3b85f77d7bf0fc04784346cd532b1b3afa81ed54147bf3299ed7613739054c7e00aa1f56bc40f8c
-
SSDEEP
6144:GWZfec9EbXDk6RkQKpYrG1VVE+I5E2Ernmy+g4/cW:3ZWtI6RkouVrLW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a91643d5a14262ebfd6d277105423d3f_JaffaCakes118
Files
-
a91643d5a14262ebfd6d277105423d3f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE