Behavioral task
behavioral1
Sample
621fc812b8ab2625b418c3090899705c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
621fc812b8ab2625b418c3090899705c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
621fc812b8ab2625b418c3090899705c_JaffaCakes118
-
Size
878KB
-
MD5
621fc812b8ab2625b418c3090899705c
-
SHA1
f1ef5f1a9fe44188d6e70f6533f7482910985e2a
-
SHA256
9563be87f39bdd3858f3c6007f7d581abf00b5e8f6c11668d15988ff02da6a65
-
SHA512
4ad41fbd1f2d65c55371ddb8bfbb68be759358054e093fd11203036a476d6e042b0265fc6370b10ec61ef8aafbdd1eba2355dd59c71dc833cdea39fa99ee2227
-
SSDEEP
3072:itfufpIyn0fnkkbheTu4EuOVCGF933pXy9ucUf7TWukeRe6eobx7lpdv0jtVFHg0:Na53ly9ucUf7TKGwDldoSzLyQLlgZE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 621fc812b8ab2625b418c3090899705c_JaffaCakes118
Files
-
621fc812b8ab2625b418c3090899705c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 616KB - Virtual size: 616KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 169KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE