Behavioral task
behavioral1
Sample
6a6e5db3246d562a0bfed25a7e49aa0f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6a6e5db3246d562a0bfed25a7e49aa0f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
6a6e5db3246d562a0bfed25a7e49aa0f_JaffaCakes118
-
Size
147KB
-
MD5
6a6e5db3246d562a0bfed25a7e49aa0f
-
SHA1
c59887b405b9a46b8591ea871831adaaca42b2fb
-
SHA256
fbd6370cfde6c21055378d0e128beb5971c49ca6e8ea4dcce35fb81e6f4ca30d
-
SHA512
260f30dd892e47b7f78731a9ad0a1aff12434c9c78945b749123f61d77e497e813f87337c6607f102af8842d622c8f5e5c9244e334fcb791cf416747b48c8b3f
-
SSDEEP
1536:HdfA/GXdfA/D3lHOK1ildfA/GXdfA/D3lHOK1ildfA/GEESmtScAiZ0FY0PMv:9f/NfpxXf/NfpxXf/dSmKXPQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a6e5db3246d562a0bfed25a7e49aa0f_JaffaCakes118
Files
-
6a6e5db3246d562a0bfed25a7e49aa0f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE