Behavioral task
behavioral1
Sample
613d841e5405a2ca080cc7128016a3b8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
613d841e5405a2ca080cc7128016a3b8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
613d841e5405a2ca080cc7128016a3b8_JaffaCakes118
-
Size
266KB
-
MD5
613d841e5405a2ca080cc7128016a3b8
-
SHA1
e9a05caf41f6cfdab85124e9f546de02d541dfb4
-
SHA256
e48fe2d72091b8f1b71ee94404372629af130002308c08d194965488159b8197
-
SHA512
04bb38606dc3e0edb37323a8527523f25dbf5e005a4b84a1c415a3920421f1cfb952a0b20378d2bdaced3613b86ca9ac8cdba2c15cb93ead7816df2ba867ecff
-
SSDEEP
6144:94o8Goc+E6oMT/bTcio5FgXvrm+EG3AYHePTju5QR0fPO2g9+JvIM1CQ:uxGoAMTbwX0rmOMx6POR90
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 613d841e5405a2ca080cc7128016a3b8_JaffaCakes118
Files
-
613d841e5405a2ca080cc7128016a3b8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE