Behavioral task
behavioral1
Sample
d66e1520bdf7e8250f0a00de302c15dd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d66e1520bdf7e8250f0a00de302c15dd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d66e1520bdf7e8250f0a00de302c15dd_JaffaCakes118
-
Size
454KB
-
MD5
d66e1520bdf7e8250f0a00de302c15dd
-
SHA1
8c27a928ef5c1b1b2a4bb458427e3f763ece8479
-
SHA256
595e050a96c06c0274363eccb45752866630461d65be0d362d08af882c975e7b
-
SHA512
fde7e9b8948767bc294985f1f963435b177660c2d5397fab9f196d941b03c4b643750dc1fb50b9cbdc22d6be04d5e325e648b1b227abbc6dce4d6f386c98634c
-
SSDEEP
6144:qDwwcZdA+SCr1+pK2ZTqq4Ag/VPdlBZIwJNvYEicithesLc4Blo0aXvF5zC2:qDm4I1KzTqq4vtdmqwSsheqc4BNaXbW2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d66e1520bdf7e8250f0a00de302c15dd_JaffaCakes118
Files
-
d66e1520bdf7e8250f0a00de302c15dd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE