Behavioral task
behavioral1
Sample
569b13f58365be5975355740448e2ebb_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
569b13f58365be5975355740448e2ebb_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
569b13f58365be5975355740448e2ebb_JaffaCakes118
-
Size
1.4MB
-
MD5
569b13f58365be5975355740448e2ebb
-
SHA1
cd552e96fdfb44e9a2b96f7b75bbd5c53d3c9456
-
SHA256
ed917419a7590bd998c3260ef104fca5cff5a14a67659cd00a77d1a8280b7edd
-
SHA512
d8a77456997cfeb593e9f0f54c83d9a339419e5ec4be8c8c0cbdbf67501442b539f2725fb9c576c48cb0f6bb600a8e41f8cd72ef05e7f16030cbd135ffc88b70
-
SSDEEP
24576:g9QT0Pd2cCBwEM6UNmTZzdvhbw23uNNy/KVk/YQ9UrAQd8TGh9GX1Io9BOEO2A:oQT0l2cCnM2wZNNUr9WGXXBOx2A
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 569b13f58365be5975355740448e2ebb_JaffaCakes118
Files
-
569b13f58365be5975355740448e2ebb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 17.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5.1MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE