Behavioral task
behavioral1
Sample
1533dc6e3e3c7a32cf9c74b27b5e1b1d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
1533dc6e3e3c7a32cf9c74b27b5e1b1d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1533dc6e3e3c7a32cf9c74b27b5e1b1d_JaffaCakes118
-
Size
849KB
-
MD5
1533dc6e3e3c7a32cf9c74b27b5e1b1d
-
SHA1
a80bfd270e879b44eaeca66ee844e61f6d8afbb1
-
SHA256
fc3bae8f4570b16d14c1a832f8be44a9eada6ba4f899f189627ae7ea73e620c0
-
SHA512
1d00dca4ed3b5e8ef4310bc9b3dadedff6530be066ae7bdff18857af2075d12a743e2e17f38dca7f81dd97f2c21a3075113204d4d2077c674d5012c18917db26
-
SSDEEP
6144:QGzRxSVtp0l6whGfsKR+zkBpTaa5tJHXhHANUTNqm6nJl3/2nJl3/j:jt0VPFfsKAkrbPlXhHANUTNqmb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1533dc6e3e3c7a32cf9c74b27b5e1b1d_JaffaCakes118
Files
-
1533dc6e3e3c7a32cf9c74b27b5e1b1d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 796KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 153KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rol Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE