Behavioral task
behavioral1
Sample
641088ff4e53e78d20df0da2d391c151_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
641088ff4e53e78d20df0da2d391c151_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
641088ff4e53e78d20df0da2d391c151_JaffaCakes118
-
Size
450KB
-
MD5
641088ff4e53e78d20df0da2d391c151
-
SHA1
d254e5d4c89087b2ce1f81b643b4e9f0e15acd96
-
SHA256
957561abe0f4265767360ee5f77f816bb4f85377405cb70f9ea52f9269fd273d
-
SHA512
b66ebd7a3fe75c6d8572fa357a6e6b0f78dbedc7dc0886a365eff47f73490f1915f1bc9c6107d3903d921c5820ad9e8b30837830b63248754817ddb5c48e0021
-
SSDEEP
12288:LAnnvbOZVDCC2x0NlnlazCQaZUEb5DhJzUZa:LSnqG2lM4F1Lg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 641088ff4e53e78d20df0da2d391c151_JaffaCakes118
Files
-
641088ff4e53e78d20df0da2d391c151_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 240KB - Virtual size: 240KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE