Behavioral task
behavioral1
Sample
101f2a243af5db1f4465c4c132d03a5e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
101f2a243af5db1f4465c4c132d03a5e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
101f2a243af5db1f4465c4c132d03a5e_JaffaCakes118
-
Size
125KB
-
MD5
101f2a243af5db1f4465c4c132d03a5e
-
SHA1
19518467d523d9ea0e5aa3c683a7ada0f973f6ca
-
SHA256
a999338715e86f8fc9fe044947763c635394c3a4c7a0c276f28d242ffa561d14
-
SHA512
2e24a0e402c81ff7d2d442fd16f3ff9c20f8ad29289be6224372d698188fb47a1109a93b2073124b59b81ba0780dc0b48705b83547e5c8e2b0842f1241a04bd2
-
SSDEEP
3072:eEQ5jh5IWAoAEPFiH3+t9wHq51JCIHRj+Y5ZUijEla:8qWAoFiX+t9Z0IZ+Y5ZUGEY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 101f2a243af5db1f4465c4c132d03a5e_JaffaCakes118
Files
-
101f2a243af5db1f4465c4c132d03a5e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 908KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 153KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE