Behavioral task
behavioral1
Sample
66dee064925bfd0256a280e07a15cd1c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
66dee064925bfd0256a280e07a15cd1c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
66dee064925bfd0256a280e07a15cd1c_JaffaCakes118
-
Size
25KB
-
MD5
66dee064925bfd0256a280e07a15cd1c
-
SHA1
352853f924a0d854b19ebbbb98c0fd400bcedeeb
-
SHA256
ecc1f070a577e6de1d4d7e559d2a755d8b82a5bbc20a7e0f7786f64475f4fbac
-
SHA512
4598caa499910fa01324f9a1f1b85a7a42507cb0b92e1abd2cd3d4ffe1288adf04e0c3f781577f08ee575efb14799c926953f464600872d57060d83615d78c29
-
SSDEEP
768:f1NAUsbxtT6sFst/3IrdlLUwmTInbcuyD7U+NC:f1NAUwtT6sFstwrbUUnouy8+NC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66dee064925bfd0256a280e07a15cd1c_JaffaCakes118
Files
-
66dee064925bfd0256a280e07a15cd1c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE