Behavioral task
behavioral1
Sample
6037bd90bea2398c771e69033c704054_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6037bd90bea2398c771e69033c704054_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6037bd90bea2398c771e69033c704054_JaffaCakes118
-
Size
132KB
-
MD5
6037bd90bea2398c771e69033c704054
-
SHA1
7d3e4c4b8511ab4b27fb5d43c6989ea8ffc4aa22
-
SHA256
92dbeaa7a4c99df41d737c21b1e2d032e8bed7fa579472cd3b8d20f8ea7437d5
-
SHA512
2f870ee80f59a4d92bc70217b4857a6ecb92b7ef4a95300d705cb9e945572f22b0f19572865761957922f32d9756a24d4debb15c5389d90e09fac63d0bd6f5c5
-
SSDEEP
3072:CgDNLLMFImyXzJfCRVBvyGpUxadm7ZN9hKRo3ZTB:ClFryXzJfCR7bpUYaZn8RuFB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6037bd90bea2398c771e69033c704054_JaffaCakes118
Files
-
6037bd90bea2398c771e69033c704054_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE