Behavioral task
behavioral1
Sample
65f216b4b07eee5a6ddd915b14fa5d86_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
65f216b4b07eee5a6ddd915b14fa5d86_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
65f216b4b07eee5a6ddd915b14fa5d86_JaffaCakes118
-
Size
123KB
-
MD5
65f216b4b07eee5a6ddd915b14fa5d86
-
SHA1
c208897077ddfbfa129573162d7c1f4b21f69947
-
SHA256
1abccee5fd6abe29a326c91563bc09d1eb6b00b6d61af3e767d20f40366a7a52
-
SHA512
9655362979b7410e3751cabd52d6e4cd1c9f67907451fd58312a5327a6169264107380e7c73c1c9701cb9229cb4083226bae6025cb3b102ab755f654badee5ef
-
SSDEEP
3072:Eb9Sb1K9HK4CTbdcsvFWj+eDafue7o0qQk0BVkY3PoutuP:E5SbwRK4CTbd9W7Dan7o0TBVkEPoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65f216b4b07eee5a6ddd915b14fa5d86_JaffaCakes118
Files
-
65f216b4b07eee5a6ddd915b14fa5d86_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE