Behavioral task
behavioral1
Sample
b465379781e6c88a8d8a299f714f8d7b_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
b465379781e6c88a8d8a299f714f8d7b_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
b465379781e6c88a8d8a299f714f8d7b_JaffaCakes118
-
Size
81KB
-
MD5
b465379781e6c88a8d8a299f714f8d7b
-
SHA1
5d8d8eb912c0f849aadaa1ff5fb77b071d981490
-
SHA256
6c246f5ecd3ddb5b0255ea7882e3ec401e2887dd927601da2de932199b5e00c0
-
SHA512
800a2b48690a8b11c8c88e38778491478883b2706be3053beb4067022745671aa0f36635700d219ed8c0596d96e945b31b288fc53c9863afbe9b8c5c3cb68581
-
SSDEEP
768:jJf0qOjFEoFEGFEKAh/AhjFEEtFEXnjYQ0vgoWPEd6RQZ:jVdiv1C8jttMnh0vqPEcQZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b465379781e6c88a8d8a299f714f8d7b_JaffaCakes118
Files
-
b465379781e6c88a8d8a299f714f8d7b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 268B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pb1 Size: 867B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE