Behavioral task
behavioral1
Sample
59a67d67b22b1c874226003b0a316ab8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
59a67d67b22b1c874226003b0a316ab8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
59a67d67b22b1c874226003b0a316ab8_JaffaCakes118
-
Size
54KB
-
MD5
59a67d67b22b1c874226003b0a316ab8
-
SHA1
5e5a4b1c47f8dd3340084a7f4774bb0dd94aa13e
-
SHA256
1b68ded4dc08b78d848cd3777a42e0bac25e4b1a9721645390087ecdc33d87e1
-
SHA512
aee3e7d57365bc5ab0f52956a139d3c1221460ce5185ad38b96abe668f3fc3e55e3ff4bf4c76d3a3922335393a37559fbe00fdada586a11e2f11cee39bedd12c
-
SSDEEP
768:jYNQ+/0UcZm5H6qinVSzaBRd+ZhWgV6g9FtWUzGkNmOQkHXmOmIkRDzPsnib6c:jYNQ+cdiUBjyWgp0oNmFqXmOWRDOib6c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59a67d67b22b1c874226003b0a316ab8_JaffaCakes118
Files
-
59a67d67b22b1c874226003b0a316ab8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE