Behavioral task
behavioral1
Sample
085e6625d7da7b54f66be5b87eac6647_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
085e6625d7da7b54f66be5b87eac6647_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
085e6625d7da7b54f66be5b87eac6647_JaffaCakes118
-
Size
444KB
-
MD5
085e6625d7da7b54f66be5b87eac6647
-
SHA1
547d830f2b2dfc18099debcf70b28610d367bc9b
-
SHA256
c233070a47e8a8281f148ff0d2690c830a5ffdc8657556c219f31b4f67c6ee4c
-
SHA512
fa0a4c6adab2056e3851d6376bed5db2a66db167b05642f725bb73de25383dba3837d83913b45b87e32e19e3733cdba1f98574c3164e0cf055dd9f4b89b50621
-
SSDEEP
12288:t2/g4Jj1BPruZdA5fwnD0heCteOMxfyURzuAaepf1Rr:ldAp7h1twfbRC5ep
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 085e6625d7da7b54f66be5b87eac6647_JaffaCakes118
Files
-
085e6625d7da7b54f66be5b87eac6647_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 179KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE