Behavioral task
behavioral1
Sample
66771241040adeb1212211cfe2bd7c19_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
66771241040adeb1212211cfe2bd7c19_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
66771241040adeb1212211cfe2bd7c19_JaffaCakes118
-
Size
49KB
-
MD5
66771241040adeb1212211cfe2bd7c19
-
SHA1
5779b3f7f4bc66e4644e0375c5ea3e8577a474dc
-
SHA256
da6da2181ba7f4184c0f00c711d6b3501d7304654445b07f8b40044a29a8cfbc
-
SHA512
3d929c6772625ea2d228ebadb9597fa37ae8197805e69b034ad6d11865e30ee294ea6f01a28118abd3150f56706ab987d4a410bc5cb0d53f6cde4a9399401cb8
-
SSDEEP
1536:XddbdSbAU5CPx82tOflRFnTwFVs1fDXpTh:XzMbAU5Ix82tURFnkFV8Lp1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66771241040adeb1212211cfe2bd7c19_JaffaCakes118
Files
-
66771241040adeb1212211cfe2bd7c19_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 520KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE