Behavioral task
behavioral1
Sample
16ecdcd5061cc95027c271c60e9d4053_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
16ecdcd5061cc95027c271c60e9d4053_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
16ecdcd5061cc95027c271c60e9d4053_JaffaCakes118
-
Size
1.7MB
-
MD5
16ecdcd5061cc95027c271c60e9d4053
-
SHA1
666c8c780623a5436e0fd1594a8b9a4e7bf933f5
-
SHA256
04f895e98e940d71611fc3f4ed13d6ab6d43515f4f9d89f4297932c3514f5e84
-
SHA512
15c796cf3142c0d197886fa523775b93385cb5edd644124b2d1c1a69bfacc8affd4c6d34af64b9fcf3be97c5043b8f315271f1d2391c204a71f118bb9b0a2fd7
-
SSDEEP
12288:LhSmEUraqIwJM8ZJRa7NUJq6cfB7/LctaqIRk8yHPQRpzP6whosD67xfOmhsVIok:NEcJf4RhIiTR5y1iKHnwC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16ecdcd5061cc95027c271c60e9d4053_JaffaCakes118
Files
-
16ecdcd5061cc95027c271c60e9d4053_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 269KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE