Behavioral task
behavioral1
Sample
JaffaCakes118_520575bc8e60c01cbd305bbcc44a5c31.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_520575bc8e60c01cbd305bbcc44a5c31.exe
Resource
win10v2004-20250217-en
General
-
Target
JaffaCakes118_520575bc8e60c01cbd305bbcc44a5c31
-
Size
580KB
-
MD5
520575bc8e60c01cbd305bbcc44a5c31
-
SHA1
30f332e5007fec206ecfb77a761054bc227b5867
-
SHA256
a04dd408c82e792f11b1951395079ec7ff19511ec41266b70460721a23d70b6b
-
SHA512
fd67c191bd196b931a425994843fcd6ab5991433e90e8fa39013b58104634c0b1237179a0c897989edbf764e436c20adb95981e703a8055a343cba03002bee5e
-
SSDEEP
12288:HGHVITPouQ52nHno3BfxmD64xF/DYgAinnylCKH6pTa6XJoS:HUVCouQ52nHngJbMFLYgAWnyt8O+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_520575bc8e60c01cbd305bbcc44a5c31
Files
-
JaffaCakes118_520575bc8e60c01cbd305bbcc44a5c31.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 608KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 577KB - Virtual size: 580KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE