Behavioral task
behavioral1
Sample
668c4eaa02b84e7c6baf877ab3d78983_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
668c4eaa02b84e7c6baf877ab3d78983_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
668c4eaa02b84e7c6baf877ab3d78983_JaffaCakes118
-
Size
903KB
-
MD5
668c4eaa02b84e7c6baf877ab3d78983
-
SHA1
d27c5fd48f9683da1facd3b48d858f1b528b3cf6
-
SHA256
4f4bc00b80d3b8cbec6afc064519d44e3688175cc517689873b05f9f74bcc324
-
SHA512
6bc45829ba7289be28132baee8d9caeb48385511289faf01fa8ba63be3d8392e2805efa248a3d7175cff0fe1a95f2a3c3e9391139f92b51d5e8f53f54ccbf5f8
-
SSDEEP
12288:H2VCYAYR6/ITscCVjV+olqKMn2eDnZnMtDnDrhp+dyIXGF2GbXb3dIyWbJpYTZ4c:W0YT6/Iqjv0DbGDSdJWXd9d4c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 668c4eaa02b84e7c6baf877ab3d78983_JaffaCakes118
Files
-
668c4eaa02b84e7c6baf877ab3d78983_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 468KB - Virtual size: 468KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 426KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE