Behavioral task
behavioral1
Sample
64ca184b4aa79152af4312e54bdd8cc5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
64ca184b4aa79152af4312e54bdd8cc5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
64ca184b4aa79152af4312e54bdd8cc5_JaffaCakes118
-
Size
183KB
-
MD5
64ca184b4aa79152af4312e54bdd8cc5
-
SHA1
2bdb480a8b9ab7bb58ec3c4df0035198ca780ec4
-
SHA256
d495330a0842ffca087198447a9aa89063e5c8e3c48e987b304d73cb3f9015eb
-
SHA512
ba584345a9ea247adf1059cfe2af2e0c8ed95bf8fc52807ff8029598f1744054599adfa32ac83dfb1da4958841ab77f30608ae0392aef7ef57ef909ae9fb3b04
-
SSDEEP
3072:Aq7ytQaeOeV2jF8ll/QzAuZQRj9VTMVRroVm6N2xt65EvSvIcxN2jDSGJYQI8m6w:AqWtQaewNAuZSVTURrUpM65EvAIcxN2I
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64ca184b4aa79152af4312e54bdd8cc5_JaffaCakes118
Files
-
64ca184b4aa79152af4312e54bdd8cc5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 732KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 176KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE