Behavioral task
behavioral1
Sample
b313ac5902c4f1ed29ecf668d04b2104_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b313ac5902c4f1ed29ecf668d04b2104_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b313ac5902c4f1ed29ecf668d04b2104_JaffaCakes118
-
Size
1004KB
-
MD5
b313ac5902c4f1ed29ecf668d04b2104
-
SHA1
b575f77f4529ebdde776b66d85f52b1e00cdf97c
-
SHA256
4ae7c43487d7fb699f8b63da05a4d32660a87958741b22f6a5d13e617805f83c
-
SHA512
be98f50faeedf40366b09a0531df66bf63fa8f0062a7a81a8af9d417e9a2fe2157d96bfc3f0ac3b4fda464a631c5ff0b556dd9c0fa74339aa27dcc79aed6296f
-
SSDEEP
24576:3uhaQXeZJ8NI8NeZJ8NI8zyOuhYZmJqsaS2ROv:Y5Y8a82KWlqROv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b313ac5902c4f1ed29ecf668d04b2104_JaffaCakes118
Files
-
b313ac5902c4f1ed29ecf668d04b2104_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE