Behavioral task
behavioral1
Sample
59984a6b6d09cb5168268c68eedd13b4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
59984a6b6d09cb5168268c68eedd13b4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
59984a6b6d09cb5168268c68eedd13b4_JaffaCakes118
-
Size
14KB
-
MD5
59984a6b6d09cb5168268c68eedd13b4
-
SHA1
b6d2d4ea791dde73a7e93274ee0dcb1a21ba837f
-
SHA256
4a42620720cd678d01b928910d109793c2ed6aad6143a1ecff9f7b52485b7ceb
-
SHA512
9d90022aff10e2b6d7199f6dec1357d55b2e3433fc6a9fcd1dff8ed73d2c930baa13c2df6dde272d60cdeb373869c9f921127eadbba5fe73c92712868a403d92
-
SSDEEP
384:CFYyi0IiGw34WrLT6Of7sR7kWKAT+AIaLPDkNNFrTX:CFvi0IiGw34WrP6y7sR7kWKAa7F3X
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59984a6b6d09cb5168268c68eedd13b4_JaffaCakes118
Files
-
59984a6b6d09cb5168268c68eedd13b4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 254KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE