Behavioral task
behavioral1
Sample
62ab3a50cedba2d22348a06af684121d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
62ab3a50cedba2d22348a06af684121d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
62ab3a50cedba2d22348a06af684121d_JaffaCakes118
-
Size
177KB
-
MD5
62ab3a50cedba2d22348a06af684121d
-
SHA1
6098a22c170c768be0ca12c5c73c2030093ebe06
-
SHA256
5b29974e37d579f99fffe5114ac5e41c28206ee0e3200717fdd4cd33e931866e
-
SHA512
2e07c1cf873758ada75e265fd2300eb4e3e4b20c46f6f8cb02314ab1076abf3aa4ad6f004e968967a02039ca28c220fc5735451300fcef964760b262385effe7
-
SSDEEP
3072:6kEy+E5CZ4BR0o+DtqA/noXYegnZ7qoslhDB+dW/qPF95WJKx2756JVc:6kEy+E5CZER0o+DtqA/ovgnZolpIdWiZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62ab3a50cedba2d22348a06af684121d_JaffaCakes118
Files
-
62ab3a50cedba2d22348a06af684121d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE