Behavioral task
behavioral1
Sample
62ee0f2e1aea05fcfb15096f9d2cf2e3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
62ee0f2e1aea05fcfb15096f9d2cf2e3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
62ee0f2e1aea05fcfb15096f9d2cf2e3_JaffaCakes118
-
Size
828KB
-
MD5
62ee0f2e1aea05fcfb15096f9d2cf2e3
-
SHA1
d535ad24f722d2bef5b7587554e52c4c111730de
-
SHA256
d1a24e99eb5e6c31e0b39128771d36a70b556aeb7d5b7a1df293a375d58d23aa
-
SHA512
67d204a90cf8a64fe6f0961d71c729b931a6d81a2967a3f2434d1111636f651ef8bcbd5be0b9ba45fa23e344f931e4b91f3d6edb1345bee20e230074f3d026b6
-
SSDEEP
24576:nMLNKcO26JPRND6JKLWWxBgvfgLmCZ4F8:nMLNKcO2cPRmjMwfkmC2F8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62ee0f2e1aea05fcfb15096f9d2cf2e3_JaffaCakes118
Files
-
62ee0f2e1aea05fcfb15096f9d2cf2e3_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 813KB - Virtual size: 816KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE