Behavioral task
behavioral1
Sample
1b6463ecd0d245405b3885019b3c49f6_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1b6463ecd0d245405b3885019b3c49f6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1b6463ecd0d245405b3885019b3c49f6_JaffaCakes118
-
Size
125KB
-
MD5
1b6463ecd0d245405b3885019b3c49f6
-
SHA1
cd38b71bea73da744bcac045e05661f0bd45c519
-
SHA256
e04a17776ea7741fb2e8d1133d94d4eda8075791230c9c87638f3ada987783ab
-
SHA512
65e40309ec47b3ad1c784fbe2c492b4ccfd7d9d7dc6284593d41a496fcf7ed8873e76eeea34a161192e5ccb8216c42d62582b5d8f06255a2dc81874d94c27e3c
-
SSDEEP
3072:PjWnO8jH2BGlIuJ3gXPl9rpox+xJOVFhsIekaWWs5i:q9jH2BGlI+gXd9ry+xBA2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b6463ecd0d245405b3885019b3c49f6_JaffaCakes118
Files
-
1b6463ecd0d245405b3885019b3c49f6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE