Behavioral task
behavioral1
Sample
156544f48a4dd151cbbcc2ac14df9623_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
156544f48a4dd151cbbcc2ac14df9623_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
156544f48a4dd151cbbcc2ac14df9623_JaffaCakes118
-
Size
611KB
-
MD5
156544f48a4dd151cbbcc2ac14df9623
-
SHA1
086dfb7a46d08d03a03fcfb088aa74fef4141899
-
SHA256
de8df4b5ffd71d59e97b2c2842d5edc43a30be624aec518e3f55cbd5bddcc490
-
SHA512
d58f4d3d9c931df262906401a695b24ee978bad76f9ff2da36f280bcb0dd254094c9f4d21e1ffdadc7a6fd089c1c585db758536a65615e0b0aaf737b8cb88f0e
-
SSDEEP
6144:UrXK1K7bjv5B0S866Az3wMX1IYOk+BRrv5T3QnB6w5xG+VZjXbu/:UG1K7fcAz3uYOkgBTq5Db
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 156544f48a4dd151cbbcc2ac14df9623_JaffaCakes118
Files
-
156544f48a4dd151cbbcc2ac14df9623_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 280KB - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 249KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE