Behavioral task
behavioral1
Sample
64cda8db29e5bd345c91568465e2be32_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
64cda8db29e5bd345c91568465e2be32_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
64cda8db29e5bd345c91568465e2be32_JaffaCakes118
-
Size
12KB
-
MD5
64cda8db29e5bd345c91568465e2be32
-
SHA1
135c0cf0b8af63ed5655df4e89f1b2dd3e7e7f76
-
SHA256
d87287ebefac6775d37a54dfc210423fc24b715c501b272b48316537d9e22339
-
SHA512
ec9c040c4229932fbbb99f862b4ea952797d3fea82af7860590126ca9d606a89c2fce2815d23842088bd29a62c71db5a69ecf70cd697c4773407ab4262ac9e27
-
SSDEEP
192:eax2Ol1v6hmZg4GFQIl/Z8CKxa9UVkroVLs3bvn81CDBLa5:/1vXpIlR8C2a9kkroOpa5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64cda8db29e5bd345c91568465e2be32_JaffaCakes118
Files
-
64cda8db29e5bd345c91568465e2be32_JaffaCakes118.exe windows:1 windows x86 arch:x86
67fdc237b514ec9fab9c4500917eb60f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.1st Size: 512B - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE