Behavioral task
behavioral1
Sample
63f1982a5e14b7c67fc445be440f8714_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
63f1982a5e14b7c67fc445be440f8714_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
63f1982a5e14b7c67fc445be440f8714_JaffaCakes118
-
Size
364KB
-
MD5
63f1982a5e14b7c67fc445be440f8714
-
SHA1
efa155dd8d843c9fe12157b57ae4e6ce8d4c9319
-
SHA256
c875be40a50cd0d88bd2a471b6f05d1e85de6b58910e139d3270d38251edbdc0
-
SHA512
601c780b8c2667ffb919d0c53f566a1f1475c48a768c0cffb1af29a2f32c51e0cbb03fa6a96883f5097c36d81cf9cb28a9e84580b61b83ec96ba6dba73eb4710
-
SSDEEP
6144:CQPj3My/47zb9OPSYpBsJoAApBCKhkPR9WKYWssaIgq+rrkqu8ORAgSX7DUqjD3:J3MBnBDY3AApBxhoVYMg1BgSXnUqjz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63f1982a5e14b7c67fc445be440f8714_JaffaCakes118
Files
-
63f1982a5e14b7c67fc445be440f8714_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE