Behavioral task
behavioral1
Sample
63ab8282f4d5805373e0e69a5d6c81e0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
63ab8282f4d5805373e0e69a5d6c81e0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
63ab8282f4d5805373e0e69a5d6c81e0_JaffaCakes118
-
Size
385KB
-
MD5
63ab8282f4d5805373e0e69a5d6c81e0
-
SHA1
22577f13f3378ad4c3b57a86b6b07ddc2bc1269b
-
SHA256
132c21541697bb6348d711f7ba58dc6f94c531d687a3c1a4d22678f6755fece6
-
SHA512
23f669d298a59bc79c7c07d759a0fbef78082faacd2a882b6053e22cdc4e3177787e27a402d4cd03c2730df3e2b5643b8b17c97d8625941db45f562fa5ce1eb2
-
SSDEEP
6144:+nCCF9RY3pyEVH9NIj6ZqUx5D0wpn8DSf+B9OmlaieFVrIYF:+nCgAdNIj6ZvDTt8Wdniek
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63ab8282f4d5805373e0e69a5d6c81e0_JaffaCakes118
Files
-
63ab8282f4d5805373e0e69a5d6c81e0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE