Behavioral task
behavioral1
Sample
60447a60e9e98fb434dc39c804221c5a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
60447a60e9e98fb434dc39c804221c5a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
60447a60e9e98fb434dc39c804221c5a_JaffaCakes118
-
Size
56KB
-
MD5
60447a60e9e98fb434dc39c804221c5a
-
SHA1
02f6aa697bca9b6fcf111102cfdf76f48b8c7726
-
SHA256
335781cfffe5ed9c13e3312bcda3764525fa464bf021fd91b9d75dc9c613eb51
-
SHA512
144a78d6e739f5e8831e3a5cc5c48ba1624270cda821346e8fefe5c359e21b7016384fb0a9fdd199c90ae2c4ebf5344b6fa71e3795cefc7c2212cf157da793c3
-
SSDEEP
1536:rr1apbMOEiVUeZzo8bxyvp180ipbr+uvTeVWl:rr1apbMFo08UBivvCI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60447a60e9e98fb434dc39c804221c5a_JaffaCakes118
Files
-
60447a60e9e98fb434dc39c804221c5a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE