Behavioral task
behavioral1
Sample
64e19a5b318e0573842350c59eae8754_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
64e19a5b318e0573842350c59eae8754_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
64e19a5b318e0573842350c59eae8754_JaffaCakes118
-
Size
52KB
-
MD5
64e19a5b318e0573842350c59eae8754
-
SHA1
a14ad991a20a25a59bbbeeed0b1acef971919407
-
SHA256
af2c2a22f42898bc04da774debf7cc4411804a4ce85f89f1787047120ce71f1f
-
SHA512
3c1a2b99fc25e9e06ab9908a1aeccfd23bced8eecdeaccd917d84b98bee2ee754761c344e31ecf85e7e570ce0788b08c32e0c4ea23ebc7bba321e8a1c8a96dfe
-
SSDEEP
1536:imX09/TLkUtcu/SoLuP4Dm9qbKac6xcYu:imEtfReu/HLfDm9qb1c6Zu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64e19a5b318e0573842350c59eae8754_JaffaCakes118
Files
-
64e19a5b318e0573842350c59eae8754_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.UPX1 Size: 512B - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UPX1 Size: 51KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE