Behavioral task
behavioral1
Sample
632935cbdd127265f38050634aa1b3a8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
632935cbdd127265f38050634aa1b3a8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
632935cbdd127265f38050634aa1b3a8_JaffaCakes118
-
Size
475KB
-
MD5
632935cbdd127265f38050634aa1b3a8
-
SHA1
6647184523b65b34a3782d4e192da1fd15a5582f
-
SHA256
5a59138e5f359bdcb5615964287e524d9b11d1cc2a76d59a64e42fd6594b0cc7
-
SHA512
fa29b74d5a67cfc2373d994035409001d7e7ef9a3d572c23de34e51018ecc83ab349f17984ea108903c33d08d9014b9e4b16de56dd479a7a1ee9aba61a71b889
-
SSDEEP
1536:nd2dI/BYV1nOf5KkC+6PuCyk0WeIsPCc69EVxImwdf13eFKA6EZWLqMh:d1Bu1nMZC++yk0l762VbwOKA6EZWbh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 632935cbdd127265f38050634aa1b3a8_JaffaCakes118
Files
-
632935cbdd127265f38050634aa1b3a8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE