Behavioral task
behavioral1
Sample
6936eaf8f56902eff01e83c0021a79e4_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6936eaf8f56902eff01e83c0021a79e4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6936eaf8f56902eff01e83c0021a79e4_JaffaCakes118
-
Size
76KB
-
MD5
6936eaf8f56902eff01e83c0021a79e4
-
SHA1
bcf5ca0a18470e8acedb1b3edaf4b99b42fd857a
-
SHA256
797efb69925fb4fb2b250604af79449de3fb18bd8ae392fc68cdd32ac4bc13a4
-
SHA512
9458a1ea4086ff0137bb0f4eda2fe09c65a0b6e9d52b162f4cd17521b99b6035258538d024b30dcb9958201bb60fe6c0616d36da12aaefa44660374cb4ba53ec
-
SSDEEP
768:B84M+FQ/LwzxB41ntEFHkB4hmEDW5ZTe1plWmTh2AzxOoDtL9EZdZg9/K:BfM++uBUtXB4hY5ZTen4mcEbsg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6936eaf8f56902eff01e83c0021a79e4_JaffaCakes118
Files
-
6936eaf8f56902eff01e83c0021a79e4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dswlab Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE