Behavioral task
behavioral1
Sample
638d919cca81e65b667013e273f6d1f6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
638d919cca81e65b667013e273f6d1f6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
638d919cca81e65b667013e273f6d1f6_JaffaCakes118
-
Size
133KB
-
MD5
638d919cca81e65b667013e273f6d1f6
-
SHA1
4c3bb0a88c885ae9718a96f8a5f6dc60bf5b6844
-
SHA256
34ee34e7d4b4995b14bd1627ae50232213dd1be08cdef38a116afa64f37a5e57
-
SHA512
1eed7bd85e908ff9d483531714594a35ab960990d5df6a44a9f7be072258aea5ee2ea172917c92a709c5daba22b7b47a447e10a98a3679a0419d3e3192436fa5
-
SSDEEP
1536:Zkj62J+qsbAavRHIETJJj3spdJpmDL02/WYQS5tMwuI0SdK7NnJUWnVRqPNyYFPZ:W+5bAa5HjTJJj4Peu7BVRKNyYasypc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 638d919cca81e65b667013e273f6d1f6_JaffaCakes118
Files
-
638d919cca81e65b667013e273f6d1f6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE