Behavioral task
behavioral1
Sample
56ec0caeb714c583098dc3dbdc7558ad_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
56ec0caeb714c583098dc3dbdc7558ad_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
56ec0caeb714c583098dc3dbdc7558ad_JaffaCakes118
-
Size
884KB
-
MD5
56ec0caeb714c583098dc3dbdc7558ad
-
SHA1
b5598ccb9992a9b1138368ad22b01398db6f9c2d
-
SHA256
d86a684003ae6dbd848b55cc2fc69c19c24617e1f7c3ff4a71d25e8be07cf163
-
SHA512
2da2dde95fdb5425589e9b2a507808a5e339069d3055f95fffcc842e460bef554574e4ab5d3ab7bec82041099d69842d66fb946d9338fccda8396d33351ada9a
-
SSDEEP
24576:qau1R6Q9pp5OOXy814bb3HxFgNZfEpQLpNneZyKxSmNJrxYAX3P:I4rxnHP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56ec0caeb714c583098dc3dbdc7558ad_JaffaCakes118
Files
-
56ec0caeb714c583098dc3dbdc7558ad_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 532KB - Virtual size: 532KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 118KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE