Behavioral task
behavioral1
Sample
bb24348e76e3f3d12a5e904b78703892_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bb24348e76e3f3d12a5e904b78703892_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bb24348e76e3f3d12a5e904b78703892_JaffaCakes118
-
Size
14KB
-
MD5
bb24348e76e3f3d12a5e904b78703892
-
SHA1
ca19ae50eaeb210eb80d80e3a2be99bc6c2e63cf
-
SHA256
00a2c43a33a534c5bdc87a6f6aed3a15a70eba58aea2ad27c4ff31494b78f57c
-
SHA512
16d22902d0644a9a7de9da23ee13dfcbc7fd23507d775cffc8e96ea75b1f9b3fcb65105a4d7d30b0967ff667f0afa57bc81d7b9d502e2b76071491e1ce5fb50f
-
SSDEEP
384:Bd/i3BwyAL+tokcg7sd0F3LOgRgZsaimaH:3631E+tppY0xhma
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb24348e76e3f3d12a5e904b78703892_JaffaCakes118
Files
-
bb24348e76e3f3d12a5e904b78703892_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE