Behavioral task
behavioral1
Sample
608757c22d2e325c62c5358a021e3d98_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
608757c22d2e325c62c5358a021e3d98_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
608757c22d2e325c62c5358a021e3d98_JaffaCakes118
-
Size
244KB
-
MD5
608757c22d2e325c62c5358a021e3d98
-
SHA1
0f3312cbf9e9efdf2b8a9a6041311503020fa974
-
SHA256
7bece77e86d301c721cdd0b0d5d6eb50eb85bd465ba63462d0c8b6563bb5e939
-
SHA512
a088cbb2b2fa8c4f27aed569aa8a659e43cf15de76ae74059f2af94f3d42062273d79ef7b653b554359316d84168c79fad88659e632bd4a7e0302518bfa7f2df
-
SSDEEP
3072:wvUMUXRMD7l5wbDahwNHUAQTY9XYhCcOLqzOb3ik1tKH3hzPTPe77UUS9dd6af0z:69UV50AtLmuzgxzPTo49uWTyJUk3V/n
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 608757c22d2e325c62c5358a021e3d98_JaffaCakes118
Files
-
608757c22d2e325c62c5358a021e3d98_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 243KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE