Behavioral task
behavioral1
Sample
62d84d6f7f74667dcd8bbd0d9bc83dac_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
62d84d6f7f74667dcd8bbd0d9bc83dac_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
62d84d6f7f74667dcd8bbd0d9bc83dac_JaffaCakes118
-
Size
372KB
-
MD5
62d84d6f7f74667dcd8bbd0d9bc83dac
-
SHA1
65233645809b4390abb35db85f8e08c2ffd5e9ab
-
SHA256
5fefba16f5481e5ee820b8cc0ed5c58ce932ddcd59de821d9c1e8a264589bff0
-
SHA512
ce47e3c0a4189c009f8d634d7bce8cce07a3888a41239073ab5a41a7d0bae5bda7071a375ea3d1b3995e5a2c5afe8ddc8d782fc616facc017f762dfe1d210d99
-
SSDEEP
3072:xsxCcZ0IBSH9vOUlZm9nA4xiaXjQ7R+OixUBgAPAREN9DIRGu4jgC6w/uztDQIZ:x4FuNdWUrm9njIFySPU/C6w/sQI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62d84d6f7f74667dcd8bbd0d9bc83dac_JaffaCakes118
Files
-
62d84d6f7f74667dcd8bbd0d9bc83dac_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 216KB - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE