Behavioral task
behavioral1
Sample
101e831f20cbbe1588eb34f342ceb7f0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
101e831f20cbbe1588eb34f342ceb7f0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
101e831f20cbbe1588eb34f342ceb7f0_JaffaCakes118
-
Size
244KB
-
MD5
101e831f20cbbe1588eb34f342ceb7f0
-
SHA1
23c7b720426812725b90b1e82d3cdd8384363135
-
SHA256
9cbf210518ec0b01f19b9e3e3cb338930623fc2f7330c3feec4542404c03f0a6
-
SHA512
2fcf19b21ff1fd617f150b231eeae6cd602ce52710236ba6f7397bf26ba57a7ec7e35bd5efb256a592e52918f4dd1aa6be152d6c8137ad1205bf301986eac956
-
SSDEEP
6144:KN1pGJ5OqDJp5gWuSY3ifSn9qo/1lSb+Bz3cUkx+yrgFN:KNg5n/5gJifSn95/HeL+ykFN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 101e831f20cbbe1588eb34f342ceb7f0_JaffaCakes118
Files
-
101e831f20cbbe1588eb34f342ceb7f0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 761KB - Virtual size: 764KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE