Behavioral task
behavioral1
Sample
65ab4ed6c87ddebf1b876b021805c37b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
65ab4ed6c87ddebf1b876b021805c37b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
65ab4ed6c87ddebf1b876b021805c37b_JaffaCakes118
-
Size
289KB
-
MD5
65ab4ed6c87ddebf1b876b021805c37b
-
SHA1
1da177d32ea7ba8d8964db30b660bb4a1621f3f7
-
SHA256
2e6ac4832d640a86bef6973897dc3c9df06d2470bbc5f7d44419d703eed2b984
-
SHA512
c322fe0406e00c87412da4bcd2f765b9b300b40800208a15cc4887f395c75c7536032548616fde5a127fea62c77a8e01ff382f77089192343edd1b099f99d939
-
SSDEEP
6144:ZDCU6OI/hxcLKBifrO5PqiXaVszlEDv4gSZ3iMI4YgxO/Sza00:xT6OIvcOBi6VX5zlEDwgSmP0OE0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65ab4ed6c87ddebf1b876b021805c37b_JaffaCakes118
Files
-
65ab4ed6c87ddebf1b876b021805c37b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 476KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 282KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE