Behavioral task
behavioral1
Sample
64b9caeb37fdde02f7302e91b1b08e7f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
64b9caeb37fdde02f7302e91b1b08e7f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
64b9caeb37fdde02f7302e91b1b08e7f_JaffaCakes118
-
Size
123KB
-
MD5
64b9caeb37fdde02f7302e91b1b08e7f
-
SHA1
e0f7b51c82453e5a50c062d8cfa00305b2b0f406
-
SHA256
160d86057ae67a0314426b29d1c53a0f7aa4a9fda649f3f31dd257c39a9c4318
-
SHA512
a4024fb2be216edc804709c84fbce37c5371e71531d3f3c6c92caae8ceacb249611f53bc4f715066c44024f5f96d1a6c065a41d0459de92859013b0148a40973
-
SSDEEP
3072:Eb9Sb1K9HK4CTbdcsvFWj+eDafue7o0qQk0BVkY3Poutu:E5SbwRK4CTbd9W7Dan7o0TBVkEPoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64b9caeb37fdde02f7302e91b1b08e7f_JaffaCakes118
Files
-
64b9caeb37fdde02f7302e91b1b08e7f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE