Behavioral task
behavioral1
Sample
61ee7a54c4e6ac12028a6323c6213b58_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
61ee7a54c4e6ac12028a6323c6213b58_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
61ee7a54c4e6ac12028a6323c6213b58_JaffaCakes118
-
Size
21KB
-
MD5
61ee7a54c4e6ac12028a6323c6213b58
-
SHA1
d8f78aa400cae9a1008e9859aedef72a11476a51
-
SHA256
97d5a3545dc0322b48034a930dce231f4705594b6d6720ea736db9bc16b6ad7a
-
SHA512
f752af42fa0800a39fd7286dc5288b0ac4301a74ce0eb6401b50a13131f4b85c89af4eb3cefdf5de87e3bf277782363346fb22c5dd7d93614feac2756d759586
-
SSDEEP
384:nphLjoKY//5SkYJdMuafmszC5pjDCr/t6g+ixMaNJawcudoD7Ul9lClOo8VD:phJYHW0fmdcr/ETuFnbcuyD7U7Mso8V
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61ee7a54c4e6ac12028a6323c6213b58_JaffaCakes118
Files
-
61ee7a54c4e6ac12028a6323c6213b58_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE