Behavioral task
behavioral1
Sample
d69b4c3374bc014454af2cc4853a323c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d69b4c3374bc014454af2cc4853a323c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d69b4c3374bc014454af2cc4853a323c_JaffaCakes118
-
Size
161KB
-
MD5
d69b4c3374bc014454af2cc4853a323c
-
SHA1
5a1968d541abae59d550186b73307811b7d79cec
-
SHA256
219b48dd7fbe97340ad2c4aafa63879c983d6e0d1559d4f59dc92ab92822bee5
-
SHA512
436a94ebfef380bef4703af0043772e61abc477cefd3f003d91af36fbaccb884084dfb601e56afbc1ffa3b11e6865051bbdec9a37ac3790f0f34971d9b4f2a9b
-
SSDEEP
3072:Nwp3xHVHtFCz1LZ0KMjFWn22sHl7WZ04E6KN9u0UDDo7Jk8W1JOb0q:a35V7Cz1LSKMjFWn2rHtWi4kg0kU7Jki
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d69b4c3374bc014454af2cc4853a323c_JaffaCakes118
Files
-
d69b4c3374bc014454af2cc4853a323c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 252KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 117KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE