Behavioral task
behavioral1
Sample
63f0dd3d089bc9b3445c79b529100fdb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
63f0dd3d089bc9b3445c79b529100fdb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
63f0dd3d089bc9b3445c79b529100fdb_JaffaCakes118
-
Size
320KB
-
MD5
63f0dd3d089bc9b3445c79b529100fdb
-
SHA1
563e82353d70504f08b3af17406a95b09b9bfa1c
-
SHA256
5d9295d1ec90b749457fa487e80a9cf2881bf54e3eee3cbb0c76b85d925ff12a
-
SHA512
25e36a705573fb3299fad2585e5703e2e0a1acb78282a2aed9ff4a04d07dab6a269763ade92ebb202389efd42c6b9b0375173ed28bb5bed9d65cb4c2de285a50
-
SSDEEP
6144:RkgTdIolRV4+sfdoGM2WYCMhxbrIg4w2GBAkN9MWkwYVPbKMO6:meIs6o0QgxbrLKG/N9MWDYVOMR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63f0dd3d089bc9b3445c79b529100fdb_JaffaCakes118
Files
-
63f0dd3d089bc9b3445c79b529100fdb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 315KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE