Behavioral task
behavioral1
Sample
14e1cef2f1b3b4692659252880c57167_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
14e1cef2f1b3b4692659252880c57167_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
14e1cef2f1b3b4692659252880c57167_JaffaCakes118
-
Size
155KB
-
MD5
14e1cef2f1b3b4692659252880c57167
-
SHA1
7f6c64de2ba226d68c8b2cc74b08437c0d6e2b85
-
SHA256
9c929a1f9b3fda891f43e921f1e29d8440a919d9d305e88c3c3b00ac092b34f5
-
SHA512
96b2df21d2b4ad7a7af4af61a27bb2dcdbf66f68631e1756053a4763fe7a04ced1f803f3ccb59fc6f991e023b903f0e9a08134c19b965f5f74bdb547a7e1ab75
-
SSDEEP
3072:yj84zpYH62T2UOGeaPXlBrYefqcrGMbDJRxB/Sj23dvnISLyYrACs8w8gZ9cHryZ:La26W7rYeNyivju8ACs8w8o2ryZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14e1cef2f1b3b4692659252880c57167_JaffaCakes118
Files
-
14e1cef2f1b3b4692659252880c57167_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 360KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 231KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE