Behavioral task
behavioral1
Sample
6157bd3c562045b59b29ddf2ed844e0b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6157bd3c562045b59b29ddf2ed844e0b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6157bd3c562045b59b29ddf2ed844e0b_JaffaCakes118
-
Size
85KB
-
MD5
6157bd3c562045b59b29ddf2ed844e0b
-
SHA1
834eab42383e171dd6a42f29a9ba1ad8a44731f0
-
SHA256
6df5ae7d366d4e3854a9e1acefc50376705b51f9e24d1acccd6b307d6fec5e93
-
SHA512
2d72137ae28b11ee8f7c7613b9f4b862cb257bcf87741d906f0da992f06a3e86dbb6798c876204e97b0ac64c856f5ffbf55cdd5b2356d34eb16bba15836a7cf5
-
SSDEEP
1536:EgJZUg/VrITpgL7vnTD0wJslKyK8IoN9++Yca53s5sVYsYkGLsoLi+iHYkfwuhg7:t6LdofslKyMovPm1VYhk/ovGYgg6G3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6157bd3c562045b59b29ddf2ed844e0b_JaffaCakes118
Files
-
6157bd3c562045b59b29ddf2ed844e0b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE