Behavioral task
behavioral1
Sample
6265f6f4cd06f58926abe69cc681c50e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6265f6f4cd06f58926abe69cc681c50e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6265f6f4cd06f58926abe69cc681c50e_JaffaCakes118
-
Size
90KB
-
MD5
6265f6f4cd06f58926abe69cc681c50e
-
SHA1
3736f3d34b566b55767789b9d3f287aa077963bf
-
SHA256
273b418e9c1e98740d63b8d6e9714b7d74184a40bba4440dd904a083932e568b
-
SHA512
7a31b7bbf3966e4170f1c6a6c67b1a676258399fa606a775afa4bc9dff90cfa1340694bbe8af698ed58f3ea658ca018581ab22ba9c5a4d7b0b1e4cee8ccb0d20
-
SSDEEP
1536:6PvinDRszwT6H8p8Zzxg9NtxTBq2euS9ZyyN4tzi157Prr6prc+nlt:xDCzEngziFIMS9IG4tzi157Prr6prc+3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6265f6f4cd06f58926abe69cc681c50e_JaffaCakes118
Files
-
6265f6f4cd06f58926abe69cc681c50e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA