Behavioral task
behavioral1
Sample
1764e646448618c9736a94e8cd6e3a69_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1764e646448618c9736a94e8cd6e3a69_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1764e646448618c9736a94e8cd6e3a69_JaffaCakes118
-
Size
260KB
-
MD5
1764e646448618c9736a94e8cd6e3a69
-
SHA1
6745293f505376d5fa9241f8eec07e95df570761
-
SHA256
0d4e75f8f35eb1d38f46515daf1add870486d59880d1e1829d1e54f0b9df132a
-
SHA512
0d4662d5e75cb61f7c83925da843175474c7614d137e034564a8db3324eac1de68061f4ddfab50f3ed460343b55ce6e6e566a5f16acf73dd6417e9c057554190
-
SSDEEP
6144:5iMPQY+2eae+QvsH0FEUHcpyb4nvWiBw:IMPQMOxvqU5cUbqWS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1764e646448618c9736a94e8cd6e3a69_JaffaCakes118
Files
-
1764e646448618c9736a94e8cd6e3a69_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 424KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 252KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE