Behavioral task
behavioral1
Sample
56e6bb43e0aba323482e31871da8657a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
56e6bb43e0aba323482e31871da8657a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
56e6bb43e0aba323482e31871da8657a_JaffaCakes118
-
Size
83KB
-
MD5
56e6bb43e0aba323482e31871da8657a
-
SHA1
1451c3217dbb8007138c487075305db9406c70cd
-
SHA256
fc2416e0b5e5f28d5da6e837a28dd7ab69ad9ab206d3df696f79197144a7f65c
-
SHA512
cdbe443bdb0d104c89be352e39d4fd4b3f52f3c326efbb23dff89a41a9cb9b8d1b0bd3ed16b56c522d69470069032061972ec2e9c017d657816ab06e8e59f2de
-
SSDEEP
768:9OXqtmZjfszlpZ6Ha9S2NNCqPONDXQPShGc7YaufU2sNj/+RmR+TKaZzI9cD:gXqUVsxpiMPONDXQqGcL2YOje9s
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56e6bb43e0aba323482e31871da8657a_JaffaCakes118
Files
-
56e6bb43e0aba323482e31871da8657a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE