Behavioral task
behavioral1
Sample
154d40e5a8403d697f91abd281a3362a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
154d40e5a8403d697f91abd281a3362a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
154d40e5a8403d697f91abd281a3362a_JaffaCakes118
-
Size
6KB
-
MD5
154d40e5a8403d697f91abd281a3362a
-
SHA1
5442a887b14262086224d4c9e7601c696b7beb2c
-
SHA256
725fad2f8b6d8e7b867ba9075618ca229b60208284536f467bdb526e0e6a86ac
-
SHA512
f5a1b95af98df35ca78ffee22fa1b04e2540760b44bd6c0a806dc7953b3e1db8f7e5c4fb3482674aac841f7015b8c1909737826c8897f0ba33dd5423f99f2eef
-
SSDEEP
96:OSSsM7d9MxuZvpt4BsK5nulH6TaZcFq/AhZcOqieqHMhsifYy+WnDAgs:8sOqQZ0BD5/fU69bs7h+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 154d40e5a8403d697f91abd281a3362a_JaffaCakes118
Files
-
154d40e5a8403d697f91abd281a3362a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 149KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE