Behavioral task
behavioral1
Sample
1318e071a2abb9d2d3123032e3599816_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1318e071a2abb9d2d3123032e3599816_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1318e071a2abb9d2d3123032e3599816_JaffaCakes118
-
Size
95KB
-
MD5
1318e071a2abb9d2d3123032e3599816
-
SHA1
cc593135f7926aea084d16f955a4e98f3dfc822c
-
SHA256
80f232c210850c9a55b3eef590895bead3862e4e23bd6a0610c872b9f5ebb42d
-
SHA512
755b496e4e7ce0ebde9a13e3d43506b1bd600501142e6af29b79516be8b1c726d14f4ff761ec489ac4b91cf2d70da527aee8ac739d67f7541c1a8d342dde53f4
-
SSDEEP
1536:4y832XUbDpgkZRqkGdUpfjyZ0pMn8ITsy96ITsy96ITsy96ITsy96ITsy96ITsyd:4bmkbDpnOvdU9yZYMFsyxsyxsyxsyxs8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1318e071a2abb9d2d3123032e3599816_JaffaCakes118
Files
-
1318e071a2abb9d2d3123032e3599816_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE