Behavioral task
behavioral1
Sample
0773fef5da6cf07f5415e2689692302d_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0773fef5da6cf07f5415e2689692302d_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0773fef5da6cf07f5415e2689692302d_JaffaCakes118
-
Size
56KB
-
MD5
0773fef5da6cf07f5415e2689692302d
-
SHA1
d7e0de561bc0619c2d4e9b7345878fb180011568
-
SHA256
df6caed9ade16f6c0bbd5cc965ad512ade45be46286d50726424ce7209697b66
-
SHA512
0c650cdbb8fcc61847dd02a57d519443eab1707e3c1c8f25ce78cf16c6be4c8d3140a269e99f6f850f7d69cc6e349c133539aae3cd8af325b4c47fcbef59d44b
-
SSDEEP
1536:nDbP28mdBd1zx7RGmFbSjxq1IMtDzSrlkID:Dr2rdBdhlRGISjx/MFzSKID
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0773fef5da6cf07f5415e2689692302d_JaffaCakes118
Files
-
0773fef5da6cf07f5415e2689692302d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE