Behavioral task
behavioral1
Sample
b514968a187e6c86840cf48f0123c57f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b514968a187e6c86840cf48f0123c57f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b514968a187e6c86840cf48f0123c57f_JaffaCakes118
-
Size
51KB
-
MD5
b514968a187e6c86840cf48f0123c57f
-
SHA1
ec48af191b5eab447eefc74936410b46dd374a73
-
SHA256
588a28060f12e31c666cf2d643d814c109a7a7d906a78e91e4ced3e969803aab
-
SHA512
2b1f08ba3bb8f1dcc96948e7b0333568e20d636fef282d3a749150a54a7c462a04b78226012c5312150606b62b39c895a775af4200445596ad411df6f417ed12
-
SSDEEP
1536:3vB2dKe46tsA34QEdTDiiRtQ+3QzEPeQLSW4:3J2dKtep36rPQ0uW4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b514968a187e6c86840cf48f0123c57f_JaffaCakes118
Files
-
b514968a187e6c86840cf48f0123c57f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 384KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 213KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE