Behavioral task
behavioral1
Sample
65ae87cc3f2df09552d4137a93570dd9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
65ae87cc3f2df09552d4137a93570dd9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
65ae87cc3f2df09552d4137a93570dd9_JaffaCakes118
-
Size
100KB
-
MD5
65ae87cc3f2df09552d4137a93570dd9
-
SHA1
105fc30145f9c31f15ccc56d061ce2993f66802a
-
SHA256
0ba515e1c7ca19a0b1e6b501e4308f1edb67baa8320fc5e04a48aaee8a9623c1
-
SHA512
9987a37eef74a8e71141a1f7fdfd37073d4a6a91a1abec337ac8c89c67a2cfaecbfc850a13ceb0bbfaf1679dfa3627e9b369052f495e9de1eb49192d3fce95a8
-
SSDEEP
768:A1xpKhTZ+u6irvv+VKrQIC4+aPdBRe1QjLZWhj59WASzAzQg6YQs2/dQfvPB+ERn:A1bc9y+29Udvyh0engERnbQKZw4iWB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65ae87cc3f2df09552d4137a93570dd9_JaffaCakes118
Files
-
65ae87cc3f2df09552d4137a93570dd9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE