Behavioral task
behavioral1
Sample
63a684ea86f3f59d7105d05305fe91c2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
63a684ea86f3f59d7105d05305fe91c2_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
63a684ea86f3f59d7105d05305fe91c2_JaffaCakes118
-
Size
271KB
-
MD5
63a684ea86f3f59d7105d05305fe91c2
-
SHA1
caa702723d0014a70f96d6eaaf4ba1ef462feefb
-
SHA256
3a9337dde09b2bd3616ac240a1f62de3c6bf55acdcab07a9657917a39501e9ca
-
SHA512
565d90a347c5dd6d49570c9eceaa6933267f5ed4e3801a137ef137366c4d871b7e97a51a1794b5c4b5551b3a3d3ec215258abe9c40055c2579316495fd52bf56
-
SSDEEP
6144:3xmpBfco/ydumpSU3J1kykWl/KVpr8a9+nbs6lYUbvgYwQ4eh:hmp9cwyEG37lkyKV5QzlYPYlz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63a684ea86f3f59d7105d05305fe91c2_JaffaCakes118
Files
-
63a684ea86f3f59d7105d05305fe91c2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 372KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 240KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE