Behavioral task
behavioral1
Sample
608b9332ac54fe763389e23e5be30c74_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
608b9332ac54fe763389e23e5be30c74_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
608b9332ac54fe763389e23e5be30c74_JaffaCakes118
-
Size
13.0MB
-
MD5
608b9332ac54fe763389e23e5be30c74
-
SHA1
30358c3e5a07a94aaad6f85f18a18db06088ec73
-
SHA256
f0890dfad72dee965ff77d42ba490c2f7153a914c2e1da4c8127511fdede7274
-
SHA512
924c557f94ccb8752d579fc2b76aa80188808d28d359ba994c1d01a5338b53afba8d3303f620174a8d093298206621ea610d6c270fadb0d7c9a1d92a352033c0
-
SSDEEP
6144:MqxDdUuHDzfN9JuGTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTT3:hvV7uy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 608b9332ac54fe763389e23e5be30c74_JaffaCakes118
Files
-
608b9332ac54fe763389e23e5be30c74_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1024B - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE