Behavioral task
behavioral1
Sample
af7194dc15cf6db5de56303d4d3e96dc_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
af7194dc15cf6db5de56303d4d3e96dc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
af7194dc15cf6db5de56303d4d3e96dc_JaffaCakes118
-
Size
11KB
-
MD5
af7194dc15cf6db5de56303d4d3e96dc
-
SHA1
663522df29f45e8a172222350487d1c211dc424c
-
SHA256
1b5a940f8b16d314832f60a000101f1636c3fbf1735397b6dadff56c43914376
-
SHA512
541084df32fd7d52ad11689e0cd8443200d053dd85af6fe191ac038539e84925f741ff4ef4fa355bfb571cef9ec58c9bf058922bbf906b9941145a79ce16c405
-
SSDEEP
192:cN5NBB0QjHS5H4VmxbXFXmN7B+PSlcHaVzzeiE2ivuxryUWdmw2xQHxpiN:CN/jS5KmqpZcHaVP3EbWwdzuQHxMN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af7194dc15cf6db5de56303d4d3e96dc_JaffaCakes118
Files
-
af7194dc15cf6db5de56303d4d3e96dc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE