Behavioral task
behavioral1
Sample
63977bfc43a246a4e4a6df4844824f61_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
63977bfc43a246a4e4a6df4844824f61_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
63977bfc43a246a4e4a6df4844824f61_JaffaCakes118
-
Size
864KB
-
MD5
63977bfc43a246a4e4a6df4844824f61
-
SHA1
965d7cda82d03aadd87bd33acaee4d7bef87eb30
-
SHA256
9152e2bc463bebb62bb872c80267786c6288377dedde6011b2a48493585d7783
-
SHA512
87dae3961a44a05adc5f51d336879e6ac8d6aa02c8d281b6918bed82b1814fffbc56ed5042dfbcea03478de523a101bdec3bf21d57f7c319660663d919ddc3d4
-
SSDEEP
24576:SWLaYPdR0MJFOiQBFSutoBfuCnh34THhCFLsrT11BwVdV5V:TWYPX0S0iXukhWoK51BwLN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63977bfc43a246a4e4a6df4844824f61_JaffaCakes118
Files
-
63977bfc43a246a4e4a6df4844824f61_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 845KB - Virtual size: 848KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE