Behavioral task
behavioral1
Sample
6395c6653ba8f0e04c720de19544edc2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6395c6653ba8f0e04c720de19544edc2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6395c6653ba8f0e04c720de19544edc2_JaffaCakes118
-
Size
118KB
-
MD5
6395c6653ba8f0e04c720de19544edc2
-
SHA1
245125d519f581bca05977888bf50e52135f5fea
-
SHA256
93790ac414aa21252bdfad3b6a062e526c94b2f452cd28e4f0261bb55733045c
-
SHA512
550cf53b838fc6dfd03931d650f6d1d0ff522fe15b40e5adc33477731e4cc1acbc5c2d9c17cea3127fc29a715240dfa08f49a97443f3f09d1ab94c31579aec78
-
SSDEEP
1536:1CgPWUROp1LUrXZL5vepgZE6oalA1G1BAghPYYa9xJFPh8tuLci6dLN1xz4QdAUu:1YL1KL5agloaTEYPYV9plxI1y24N
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6395c6653ba8f0e04c720de19544edc2_JaffaCakes118
Files
-
6395c6653ba8f0e04c720de19544edc2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE