Behavioral task
behavioral1
Sample
159ebf0630f860bc2624942a8e84273d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
159ebf0630f860bc2624942a8e84273d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
159ebf0630f860bc2624942a8e84273d_JaffaCakes118
-
Size
81KB
-
MD5
159ebf0630f860bc2624942a8e84273d
-
SHA1
a1efc42c7191ca714e9e7b6b7b27d59a71fd8197
-
SHA256
c948e133008a122bc8f0008d900fe12289fbdd529fc796edb36115b4ce8764e6
-
SHA512
7d0c12dcf1f248973f7ffad2109e25ed8f311b85029c39d9671dda08ca2a5e1feae28ce546819d9df64e7210f0f35b3bc3cbd49eb6268d2e89b172c1a9cffb26
-
SSDEEP
1536:ss7XQ23o1rPaSQpKtXldEBKgxSinSXYyPs+smZm9QkBZ/qNV9UbOr8O1of8Mvjj:f7g2wDNQpKv2bncYy07mZm95KjUeT1k
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 159ebf0630f860bc2624942a8e84273d_JaffaCakes118
Files
-
159ebf0630f860bc2624942a8e84273d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 264KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE