Behavioral task
behavioral1
Sample
65d4054566dda7aa0c03cb0dd31ea8e7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
65d4054566dda7aa0c03cb0dd31ea8e7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
65d4054566dda7aa0c03cb0dd31ea8e7_JaffaCakes118
-
Size
139KB
-
MD5
65d4054566dda7aa0c03cb0dd31ea8e7
-
SHA1
44f241c00e385dcc61615ed57a5c843b41bd6658
-
SHA256
492e805be9055009d72453c41f0e43be6b465826239b21aeb4aefe3ef238e437
-
SHA512
57841b087c6dc35134883a001c25c644c08f36f6620bb48907e60dd98a8b348e46af6616ea1f1a4e6f1ebbd888b71c9ab1b98dfda0c3c55a6460c716b7878a2c
-
SSDEEP
3072:Ye8jMCjM/keGyMYaKW6Y307R116ouVecMdlT0/m:YftIPaN33GP16oBxt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65d4054566dda7aa0c03cb0dd31ea8e7_JaffaCakes118
Files
-
65d4054566dda7aa0c03cb0dd31ea8e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE