Behavioral task
behavioral1
Sample
531f56747da031b11f05c0332007e400_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
531f56747da031b11f05c0332007e400_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
531f56747da031b11f05c0332007e400_JaffaCakes118
-
Size
66KB
-
MD5
531f56747da031b11f05c0332007e400
-
SHA1
ac8c4e233453635a46bb8e556c81f6ac55b5eeb3
-
SHA256
b7ace9eacd46b788a79b5a9a1f1af2d8108ebda0a9e24fd1e4c2dbcbd935e078
-
SHA512
69a57108860680843a25a7fb1919e43020491431fd12e108e2df02b46cc04c874b8b776b5c0cd8ba8e01a634d899f63aeabe1510a4f8facc991cf25a65eaba99
-
SSDEEP
1536:27h37GP4esN1SSGbzy/x2/bJ6SEspeET1mlkYQM+c/n57LEJcri8wNd5FBNzxkPh:2FKATnS4/U/bJJEspe0mCsf/n57LHrNj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 531f56747da031b11f05c0332007e400_JaffaCakes118
Files
-
531f56747da031b11f05c0332007e400_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 424KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 158KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE