Behavioral task
behavioral1
Sample
2619c507332ac5c2273985b0db62abdd_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2619c507332ac5c2273985b0db62abdd_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2619c507332ac5c2273985b0db62abdd_JaffaCakes118
-
Size
156KB
-
MD5
2619c507332ac5c2273985b0db62abdd
-
SHA1
b6719b3607df7f23afcb87cf921f50a4a0d57109
-
SHA256
cffc0bd350ed8c0dc7c50a7bef9a3b2890a918e7a8e96b8f63476c3422a287e3
-
SHA512
d21c1a3e4a42f8949e31cd728cb0c3d8447fc7be7712389f869549367f79a1f440e4c35f03c3e2b770acdd9190f6a930337809668f42aaee283081db14412e1f
-
SSDEEP
3072:Ot/Xwcn7FQeT7N0QxNkifzP6vFYblA/Ba7pO:2/Xbn7FQe/N5N3fzOFYbC/870
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2619c507332ac5c2273985b0db62abdd_JaffaCakes118
Files
-
2619c507332ac5c2273985b0db62abdd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 289KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE