Behavioral task
behavioral1
Sample
64bde133dfa99ab0a56532d9d6da4fb3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
64bde133dfa99ab0a56532d9d6da4fb3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
64bde133dfa99ab0a56532d9d6da4fb3_JaffaCakes118
-
Size
42KB
-
MD5
64bde133dfa99ab0a56532d9d6da4fb3
-
SHA1
e1677133e76e1917a31081fcf0e6e8afdf56fa65
-
SHA256
1dee907fda5f034bef60181d1ade693638330e5e8be47331e45d892dba225eae
-
SHA512
a423bcc3d9368a2d9675306f0c02ee94782968ce14a5863dc05bae0f826346de4f10763cb067e2467104be4b21b3d0c4f0515c5e5574c020f64fc1fe2a20d4c6
-
SSDEEP
768:mdM4WZ63+Mxjx6Z0KDoTUBCqs0g2m/1qZF/MmklIsLGq4Xf9n/0bgcCIwk9gNEnr:mdMDZBMFBQBCvdv1qZGmkWsLAXVn0gcL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64bde133dfa99ab0a56532d9d6da4fb3_JaffaCakes118
Files
-
64bde133dfa99ab0a56532d9d6da4fb3_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 475KB - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE