Behavioral task
behavioral1
Sample
63fb994e579010b5c38af614d5c28e43_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
63fb994e579010b5c38af614d5c28e43_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
63fb994e579010b5c38af614d5c28e43_JaffaCakes118
-
Size
267KB
-
MD5
63fb994e579010b5c38af614d5c28e43
-
SHA1
1d1cb93caf6e1c73c4cbf6dca4dd1cb3ee4cabc0
-
SHA256
90ae66b0c8d5e2b8789155dcd15ad17f2235b776ba91c66c4b625fa33b629f98
-
SHA512
d89fff524efd6c0c47053ebd7956af7042eebebc444ca10b5815fb57d5058b4ee4ddaf5b806fea815be3e21d026e08082d555b2dd12da4a14b2a36edd63ec7f1
-
SSDEEP
6144:DZ6YZ/SbwVVWa9P1s1bjm1L2GndMLvb2fiE4aivI6nVAk:DZ6YMbwVMah1Ojm1L2GdM2fiE4aQI6P
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63fb994e579010b5c38af614d5c28e43_JaffaCakes118
Files
-
63fb994e579010b5c38af614d5c28e43_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 720KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 325KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 147KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE