Behavioral task
behavioral1
Sample
65b260fca82b184611a60174cd724411_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
65b260fca82b184611a60174cd724411_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
65b260fca82b184611a60174cd724411_JaffaCakes118
-
Size
292KB
-
MD5
65b260fca82b184611a60174cd724411
-
SHA1
5928a45ab2d6da60219fc9f305a3714c4c98f45a
-
SHA256
fc3e08979bc9cb2aef1078af2b634d69015f542271531ce75ee33aa3f907636c
-
SHA512
625322b86a10c9e00d9bea4840d531559dc059ca10e332566a8dfc02b28e74b8ac17c2c7c3177c6ced05baceac1139d85344f066c94c16e779792028ec424a46
-
SSDEEP
3072:2Up6s+bA90Kv4T0sYDOzOo7v2InSzLnW4Kxw0L6L68MD6bKNzds1qrZ2nW:/AKO0jDOzOAvJSfhkpLt8MD6bKhW1IZ5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65b260fca82b184611a60174cd724411_JaffaCakes118
Files
-
65b260fca82b184611a60174cd724411_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE