Behavioral task
behavioral1
Sample
0668c301ba0930a33d8f1ddc3c9e0df2_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0668c301ba0930a33d8f1ddc3c9e0df2_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0668c301ba0930a33d8f1ddc3c9e0df2_JaffaCakes118
-
Size
200KB
-
MD5
0668c301ba0930a33d8f1ddc3c9e0df2
-
SHA1
198a5050d51c7fc2322e10d084feec6925ca28dc
-
SHA256
d81cefcdb64e0f93a784301c26dd9c4ff8efbb1c93002773b45badbe40ea7c5a
-
SHA512
c46a84bb7baafe948fd5c119fee7bb07a6fdd8c1d397c9223cc7d22bed4a75a3a38fa303fad4ace14de0da1832f701c1a0698970680dd44f79988832750374ff
-
SSDEEP
3072:rDkxBb8ABaoKcJ40ihJ/fTCy9Zqsf3hFKFdOkkPHW+NUH4xiVAKG56:fkxFLB9JghZQsf3h4kPHW+Ny4xi1G56
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0668c301ba0930a33d8f1ddc3c9e0df2_JaffaCakes118
Files
-
0668c301ba0930a33d8f1ddc3c9e0df2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 352KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 194KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE