Behavioral task
behavioral1
Sample
64a942bde9d6ae4ad5dd34a01a1d8392_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
64a942bde9d6ae4ad5dd34a01a1d8392_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
64a942bde9d6ae4ad5dd34a01a1d8392_JaffaCakes118
-
Size
16.9MB
-
MD5
64a942bde9d6ae4ad5dd34a01a1d8392
-
SHA1
9649b9b66e02bd9cedadf55ef67af438f3f02568
-
SHA256
a1d0c1b79c0073fb286c131792966ef5f7461315d314d0a609071a6cde1934c4
-
SHA512
868df26a5c30f130e44b47f399c6b2c4a60efa4e83507c52a2f75e04335d29bad4e096855ce8179e6ca68db7b866f0ebfd4e6d25778db9e3a19e49df8e3d613b
-
SSDEEP
393216:tXPwZN3X1HQ6ALgryGnnejbqWpPWm+ywDbeRruEcCGq8UISAn:huv/ejbRtNFuEct9Uv0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64a942bde9d6ae4ad5dd34a01a1d8392_JaffaCakes118
Files
-
64a942bde9d6ae4ad5dd34a01a1d8392_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 588KB - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 637KB - Virtual size: 640KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE