Behavioral task
behavioral1
Sample
16fd0a85c4e8543d7e48ac0806590780_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
16fd0a85c4e8543d7e48ac0806590780_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
16fd0a85c4e8543d7e48ac0806590780_JaffaCakes118
-
Size
524KB
-
MD5
16fd0a85c4e8543d7e48ac0806590780
-
SHA1
be66bf9a40d43c85b94a75b0c9da2a7c5c06d40f
-
SHA256
1e49341a8b65a0840a5edd31c97106f730e3e9dd0298a2c79f6a56c2238774c3
-
SHA512
2e133ebdc1309151aacd76346c7c1dc3a6d21106945c0259c505103c120fc868d935012181c6e4b420d3d8a35b11aeca16d55b6771dd4480013870600fff3001
-
SSDEEP
6144:FNJ5kQfWMeBwnVdTt4JScR5sqeNBZM+MxSOJWalro4vjALvC+0NNPb+BKbenPELm:FXf1lVRGscR5CmHkTn0mBpnPqlsInRmP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16fd0a85c4e8543d7e48ac0806590780_JaffaCakes118
Files
-
16fd0a85c4e8543d7e48ac0806590780_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 21.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 872KB - Virtual size: 872KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE