Behavioral task
behavioral1
Sample
56dfce0c4e5858c7fcade086a11d85ed_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
56dfce0c4e5858c7fcade086a11d85ed_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
56dfce0c4e5858c7fcade086a11d85ed_JaffaCakes118
-
Size
871KB
-
MD5
56dfce0c4e5858c7fcade086a11d85ed
-
SHA1
5fdabe0a4bac10d550d82bff2ff2142dd5dec928
-
SHA256
aebba235fe432849dfb45b6e7e7eb0faa44e28211aea41a32c47543d975de934
-
SHA512
c2c733f81c79cf92296ace9c9568f2b0d49fc382cb8edfcfb85ac171d7b0c0b4e68e8babceecbffabacbfdebc1faa233b1a4423d284dbf532f7b566583243210
-
SSDEEP
24576:WUwp1ssQZgzVYJxBFNLBMVvpL8GSUrgfgpV7q4qU:Lw+ZgCUl8+rSo7q4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56dfce0c4e5858c7fcade086a11d85ed_JaffaCakes118
Files
-
56dfce0c4e5858c7fcade086a11d85ed_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 853KB - Virtual size: 856KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE