Behavioral task
behavioral1
Sample
af40552e6ca870a5a808f2418db525af_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
af40552e6ca870a5a808f2418db525af_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
af40552e6ca870a5a808f2418db525af_JaffaCakes118
-
Size
110KB
-
MD5
af40552e6ca870a5a808f2418db525af
-
SHA1
8562720d677cc039182064811b2ce1840a59c7cd
-
SHA256
04ada1791fecf44dcf77f1fa1d221f4749cc143ef42e4206d5a60a686ff1dd3a
-
SHA512
dbe895f5a9cbfab14ca130a0d6850ab8b9fca03f5f344c999683651fce71264bf9c3e14f10aaa591f92a5c16b2d8125ea980eb47030ef0dd87ce05aeb8391c1b
-
SSDEEP
3072:Zoy8j7VnNdrPHaSekwi+mW+2Q7bv6Vout:p8jZ7rvaU3+mWrQ36VoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af40552e6ca870a5a808f2418db525af_JaffaCakes118
Files
-
af40552e6ca870a5a808f2418db525af_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE