Behavioral task
behavioral1
Sample
62c7e3bbbdb852184c8d685d92ff6029_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
62c7e3bbbdb852184c8d685d92ff6029_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
62c7e3bbbdb852184c8d685d92ff6029_JaffaCakes118
-
Size
325KB
-
MD5
62c7e3bbbdb852184c8d685d92ff6029
-
SHA1
b0ee6bb3d0b07893b2b21e26fdf8c3fe67c4fed0
-
SHA256
2e510e2ac692c4261b34ab546140ff3ead667c2b9e99729f56c4ecf3224730ac
-
SHA512
3110aa0b93957cd248847a7146dc17d3548afbf20789ef6484b46fcdf0e528b10141538e7a11aa3c1c9872e89193f3c5625c3cb57127f2f6aaefbd9fa45c9517
-
SSDEEP
6144:XBQq4DNlkm/wI6l1IUH5GPcMPRhyYz4dVQAM7FquBoY0NtvNdYM:uBPkJpzGEsRfz4IIioYuvNdYM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62c7e3bbbdb852184c8d685d92ff6029_JaffaCakes118
Files
-
62c7e3bbbdb852184c8d685d92ff6029_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 832KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 380KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE