Behavioral task
behavioral1
Sample
662792e0240b19490f6132c1d2b6f613_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
662792e0240b19490f6132c1d2b6f613_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
662792e0240b19490f6132c1d2b6f613_JaffaCakes118
-
Size
21KB
-
MD5
662792e0240b19490f6132c1d2b6f613
-
SHA1
088db8eab0dcd5ba146eb1a51c92a115f71f3025
-
SHA256
43c41134a4d2b97ad5faedbeec05f00ebc3ab473e58f4f90adbc6f7fc7366d4a
-
SHA512
5c1b4e448378eb49569ed2834e203a040aa1c7e420883becbacd461ee52c1c57bbcd941f06571e7ac8e0b538b1d54545ba1a16a48e47619b3e5834d08a970421
-
SSDEEP
384:mIiV728hUQ7Y2P/cVEccDdye7kjlWLe7grPiA8jyrMPhTjanbBoZAjK+aNJawcur:mRGuY2P0Vo6r7SiAwyrMRjbVPnbcuyDD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 662792e0240b19490f6132c1d2b6f613_JaffaCakes118
Files
-
662792e0240b19490f6132c1d2b6f613_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE