Behavioral task
behavioral1
Sample
00a6a32d9ee231ce261909c8406c5062_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
00a6a32d9ee231ce261909c8406c5062_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
00a6a32d9ee231ce261909c8406c5062_JaffaCakes118
-
Size
668KB
-
MD5
00a6a32d9ee231ce261909c8406c5062
-
SHA1
77ad47173143ac3a62884f1d72e3db5d22a2a0e4
-
SHA256
4fe3d413254f17a34e0a08fc3e8ffc95d77c66907b1731fa6538cea9fc6f63ce
-
SHA512
f93cc051e44400cb05b9c40476bd78741a44b3b182fdf3045b62a0788c89017f4267ef86057ce7f7b3917a2c4dc9bc5a3958f8c70feacef7f7810b7074e95903
-
SSDEEP
1536:JcPWlJ71p8ch91dnyReASA7i3WE7zz5byTHEKqpTcWQJzwPR4:Jc2t71dnESA7i3DL5byIKqpY3SR4
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 00a6a32d9ee231ce261909c8406c5062_JaffaCakes118
Files
-
00a6a32d9ee231ce261909c8406c5062_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 516KB - Virtual size: 516KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE