Behavioral task
behavioral1
Sample
66bc6f75630f5c4258bfae34ca718d68_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
66bc6f75630f5c4258bfae34ca718d68_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
66bc6f75630f5c4258bfae34ca718d68_JaffaCakes118
-
Size
91KB
-
MD5
66bc6f75630f5c4258bfae34ca718d68
-
SHA1
8bb9de01123202ac4e1313a4bb8da88704a9853e
-
SHA256
23fa4a972630d423157886a000d61d2086ab276ecbe57a30d28a1dd1874c37c2
-
SHA512
350c41e6cf7d4ae961dd29e2b2309958b94c5d12d31ff4cd0dc38f67ec9914f3207ca6cb2b771a3147db4e8e4c53c5cb127c581345d2ec069bcc84ea1b58d2a6
-
SSDEEP
1536:cPJCbSd0TGgXFc2cI0n1S7u7kPG732uddL5nouy8CqY+T9Lqs1taGZ2iT5yEOOgB:eCOwXFzf7uKG7313poutY3sZZTT0EOOG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66bc6f75630f5c4258bfae34ca718d68_JaffaCakes118
Files
-
66bc6f75630f5c4258bfae34ca718d68_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE