Behavioral task
behavioral1
Sample
2623facb57bc0d08f03ab3589ce8ad62_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2623facb57bc0d08f03ab3589ce8ad62_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2623facb57bc0d08f03ab3589ce8ad62_JaffaCakes118
-
Size
146KB
-
MD5
2623facb57bc0d08f03ab3589ce8ad62
-
SHA1
a161bcce756989b0fcbc1d618c55c1d2f9556808
-
SHA256
c64e629ed6ba2dd63450daa74cbbcd093f1122d6bb44be7c300d01e1aecd7f6b
-
SHA512
d7d0ef4bb0a00e6e37a65bd4c636d37f00f7b52930c4f741162797499a566d02480a9e6963dab37407bda3d44cf6e577b217305f64266156c3d10ca57da1e5e3
-
SSDEEP
3072:GXG5+yMpbDd1gWIZalnsMG3d63dZZUCLS2bdtsytoKq62W:GI+lFx1gSsbMZmCztsym/W
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2623facb57bc0d08f03ab3589ce8ad62_JaffaCakes118
Files
-
2623facb57bc0d08f03ab3589ce8ad62_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 9.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE