Behavioral task
behavioral1
Sample
531a22aaf9da551d9cd8ba9bd187890a_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
531a22aaf9da551d9cd8ba9bd187890a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
531a22aaf9da551d9cd8ba9bd187890a_JaffaCakes118
-
Size
176KB
-
MD5
531a22aaf9da551d9cd8ba9bd187890a
-
SHA1
163d6c3ec3d72e05ee3d1c93af2c527f5ad52223
-
SHA256
e53c03a748f05538bb7708d65626e7e84cc882fa1450ba7ec89054abfcc39b60
-
SHA512
f72ce00b83cfd48703bb997798e4c13a7269f0b9a16b95b72bbba8cb9d88ec73689d47fb6db4d87dd8c640c9a6b366e8c7b975cda0c8fc1456baae20239bda37
-
SSDEEP
3072:+Ru/zqjrFgIVB+MgfIyADVntTWfGK+5R1YQ8YfZcsnpIABHNVE5jBkSLKHiM:qYGf2IVB+MguntTYGxtoYVnpIA7VE5dM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 531a22aaf9da551d9cd8ba9bd187890a_JaffaCakes118
Files
-
531a22aaf9da551d9cd8ba9bd187890a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 178KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE