Behavioral task
behavioral1
Sample
610856a38cfff27b01450c6fd460a309_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
610856a38cfff27b01450c6fd460a309_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
610856a38cfff27b01450c6fd460a309_JaffaCakes118
-
Size
328KB
-
MD5
610856a38cfff27b01450c6fd460a309
-
SHA1
f83ad40ea273ca51188789cc093709832ced6f7b
-
SHA256
c545b07e4c128ffe170fa5ceebc8e275d431adafbaeddb57d12f32b53fdde5fb
-
SHA512
0ea7c78eda43c74e11d1a1e2c2b616b163fb484f8a92a6d3ad6e51d02d82a239d1185f230eb4d5ad2d6603a77038f977f7a8de251759fe42a93f688bf1ea9511
-
SSDEEP
6144:M/ZtuUgIndZM9TB1MI/Zgq0fy2F92W+bn33a+7LVNvhqTb+FLr5AIjrW92F:M/ZEUgInduWq0K2qW0a+7LV3qP+1jrWY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 610856a38cfff27b01450c6fd460a309_JaffaCakes118
Files
-
610856a38cfff27b01450c6fd460a309_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 452KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 319KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE